St. Luke’s Medical Center notifies NPC of personal data breach

Vehicles arrive at the St. Luke’s Hospital in Quezon City on August 10, 2021. Jonathan Cellona, ABS-CBN News 

MANILA — The National Privacy Commission said Monday it has received notification of a personal data breach from St. Luke’s Medical Center but declined to give details.

Under the Data Privacy Act, a personal information controller has to notify the commission and  the affected data subjects within 72 hours of knowledge of a personal data breach or “reasonable belief” that one has happened.

NPC Deputy Privacy Commissioner Jose Bellarmino II confirmed receipt of the notification on October 30.

He said the NPC is reviewing the notification and is “unable to disclose further details as the matter undergoes the commission’s regular evaluation process.”

St. Luke’s Medical Center, which has hospitals in Quezon City and Taguig, has yet to issue a statement on its official website.