iRealtee OS Glossary

Section 16 of the Data Privacy Act

This section forms the core of Chapter IV (Rights of the Data Subject) and establishes what individuals can demand from entities that collect, store, and proces...

Section 16 of the Data Privacy Act

Section 16 of the Data Privacy Act is a provision under Republic Act No. 10173 enacted by the Congress of the Philippines that defines the fundamental rights of data subjects over their personal information.

This section forms the core of Chapter IV (Rights of the Data Subject) and establishes what individuals can demand from entities that collect, store, and process their personal data.

Key Provisions

Section 16 grants data subjects the following rights:

  • Right to be informed – Know whether personal information is being processed, including purposes, scope, and methods
  • Right to access – Obtain copies of personal data, sources, recipients, and processing details upon reasonable demand
  • Right to rectification – Dispute inaccuracies and have errors corrected immediately
  • Right to erasure or blocking – Suspend, withdraw, or order removal of personal data that is incomplete, outdated, false, or unlawfully obtained
  • Right to damages – Receive compensation for harm caused by inaccurate, incomplete, or unauthorized use of personal information

Who is Affected?

This provision applies to:

  • Data subjects – Any individual whose personal information is processed
  • Personal Information Controllers (PICs) – Organizations that determine the purpose and means of processing personal data
  • Personal Information Processors (PIPs) – Entities that process data on behalf of a PIC
  • Data Protection Officers – Designated personnel responsible for compliance

In Philippine real estate, this includes brokerages, developers, real estate agents, and platforms that collect buyer or client data.

Penalties

Violations of data subject rights under Section 16 can trigger penalties under Chapter VIII of the Data Privacy Act. Depending on the offense:

  • Unauthorized processing: 1-6 years imprisonment and PHP 500,000 to PHP 4,000,000 in fines
  • Unauthorized disclosure: 1-5 years imprisonment and PHP 500,000 to PHP 2,000,000 in fines
  • Concealment of security breaches: 1.5-5 years imprisonment and PHP 500,000 to PHP 1,000,000 in fines

Penalties increase when the violation affects 100 or more individuals or when committed by public officers.

Relevance to Philippine Real Estate

For real estate businesses, Section 16 compliance is critical because brokerages and developers collect sensitive client information including:

You must inform clients about how their data will be used and provide access upon request. Real estate platforms should implement audit trail systems that log data access and modifications. This allows you to verify that changes to client records are properly documented—a direct requirement under Section 16(c)(7), which grants data subjects the right to know when their information was last accessed and modified.

The National Privacy Commission requires all organizations processing personal data to register their data processing systems and appoint a Data Protection Officer. Failure to honor data subject requests can result in complaints filed with the NPC and potential administrative or criminal liability.

References

Looking for another term? Browse the full glossary.

Back to Glossary