Philippines’ Commission on Elections found liable for data breach

Abstract

The NPC decision also gave a rundown of what types of compromised sensitive personal information were contained in Comelec’s two web-based applications - the voter’s complete name, date of birth, gender, civil status, address, precinct number, birthplace, disability, voter identification number, voter registration record number, reason for deletion/deactivation, registration date, and update time. Within six months, the Comelec should implement organizational, physical and technical security measures in compliance with the Implementing Rules and Regulations of...