PUNISHABLE ACTS:

1. Unauthorized Processing of Personal Information and Sensitive Personal Information.

- For example, HGC employee is under the Human Resources Department, in charge of
handling the files of the personnel. He sent a copy of an employee’s personal information
such as the benefits and salary to a friend who is not authorized, and not connected with
the office.

2. Accessing Personal Information and Sensitive Personal Information Due to Negligence.

An HGC employee is the secretary of the human resources department, in charge of receiving
documents from other departments. He received a classified document regarding the profile of
an applicant, which includes the 201 file of the aforesaid applicant, upon receipt; he went to the
restroom and left the 201 file on the table. Other personnel under the human resources saw the
201 file of the applicant, hence the personal information was accessed due to his negligence.

3. Improper Disposal of Personal Information and Sensitive Personal Information.

HGC HR analyst had to dispose a photocopy of the received 201 file from a certain Corporate
Lawyer. The HR analyst only placed it in the trash bin without shredding the 201 file. Hence, he
is liable for improper disposal of personal information.

4. Processing of Personal Information and Sensitive Personal Information for Unauthorized

Purposes

The same Secretary safekept the 201 file of the applicant since he has a crush on the applicant.
He saved the number and called the applicant for his own personal benefit. He is liable for
processing of Personal Information and Sensitive Personal Information for Unauthorized
Purposes

5. Unauthorized Access or Intentional Breach.

From the scenario in number 4, he has unauthorized access and intentional breach because it
was his intention to save the number of the applicant and use it for his own.

6. Concealment of Security Breaches Involving Sensitive Personal Information.

When the applicant asked how the secretary got her number, the secretary denied that he took
it from the 201 file and profile of the applicant.

7. Malicious Disclosure.

When the secretary was turned down by the applicant, he gave the number to his friends so
that they can annoy the applicant.

8. Unauthorized Disclosure

The dissemination of the contact number of the applicant was an unauthorized disclosure.