The act of processing sensitive personal information for unauthorized purposes is punishable by

The act of processing sensitive personal information for unauthorized purposes is punishable by

• A. 1.5 to 5 years of imprisonment and fine of P500,000 to P1,000,000
• B. 2 to 7 years of imprisonment and fine of P500,000 to P2,000,000
• C. 1.5 to 5 years of imprisonment and fine of P500,000 to P2,000,000
• D. 2 to 7 years of imprisonment and fine of P500,000 to P1,000,000

Answer: (B)

Processing sensitive personal information for unauthorized purposes is treated as a serious privacy violation. The law assigns a criminal penalty that recognizes the heightened risk to individuals when highly sensitive data is misused, requiring both imprisonment and a substantial fine. The penalty range reflects this severity: two to seven years in prison, with fines from five hundred thousand to two million pesos. This combination is the appropriate response to unlawfully handling sensitive data, such as health information, biometrics, or other protected categories, or using it beyond the permitted basis. Other penalty ranges either understate the imprisonment period or cap the fine too low, which is why they don’t fit the offense as defined. The larger fine cap and the longer imprisonment window align with the intent to deter and punish misuse of highly sensitive information.

Processing sensitive personal information for unauthorized purposes is treated as a serious privacy violation. The law assigns a criminal penalty that recognizes the heightened risk to individuals when highly sensitive data is misused, requiring both imprisonment and a substantial fine. The penalty range reflects this severity: two to seven years in prison, with fines from five hundred thousand to two million pesos. This combination is the appropriate response to unlawfully handling sensitive data, such as health information, biometrics, or other protected categories, or using it beyond the permitted basis.

Other penalty ranges either understate the imprisonment period or cap the fine too low, which is why they don’t fit the offense as defined. The larger fine cap and the longer imprisonment window align with the intent to deter and punish misuse of highly sensitive information.