IN an increasingly digital and AI-driven world, how prepared are we to protect our data?
Today, personal information is generated from almost everything we do — from the apps we use and platforms we engage with to the transactions we make and information we share online. It fuels insights and shapes business decisions.
As organizations continue to navigate rapid technological transformation, the importance of data privacy has never been more pronounced. Beyond compliance, it has become a cornerstone of trust, accountability and responsible stewardship of information. Data privacy shapes how we operate and how we build confidence with the people we serve.
In 2018, more than a hundred Philippine government websites were downed due to a server malfunction. Since this incident, the National Privacy Commission has committed to championing initiatives aimed at strengthening data protection awareness and resilience across the country. Among these is the celebration of the National Data Privacy Awareness Week, held every last week of May in compliance with Proclamation 527. This serves as a nationwide platform to promote awareness, encourage best practices and reinforce the importance of safeguarding personal data in both the public and private sectors.
Our firm, P&A Grant Thornton, supported the celebration through a Privacy Awareness Learning Session. In line with this year’s theme of “Anamnesis: Looking Back and Moving Forward,” the program provided a valuable space for reflection and forward-thinking discussions, with experts Aubin Arn Nieva, director of the Data Security and Compliance Office of the National Privacy Commission, and Sam Jacoba, founding president of the National Association of Data Protection Officers of the Philippines, sharing insights on emerging risks, AI governance and the evolving role of trust in a digital landscape.
With these insights in mind, let us look back, reflect and renew our commitment to ensuring that data privacy remains embedded in everything we do.
Keeping up
Despite a high level of tech-savviness among Filipinos and the country ranking 9th in social media users in 2025 in a survey by World Population Review, we are still lagging behind in digital competitiveness. Despite jumping five places in the International Institute for Management Development Digital Competitiveness Ranking, the Philippines still faces significant gaps, placing 56th out of 69 economies and second to the last in the Asia-Pacific region.
This relatively limited competitiveness calls for improved skills, institutional capabilities and regulations. When it comes to data privacy, for example, organizations must move beyond viewing compliance as a mere requirement and instead embed privacy into the design of their processes, systems and technologies from the outset. A proactive approach where risks are anticipated, controls are strengthened and awareness is built, allows organizations to better protect data rather than simply responding after a breach or incident occurs.
Organization-wise, developing engaging training sessions and policies in line with emerging technologies remains a critical step in strengthening privacy resilience. Equipping employees with practical knowledge and fostering accountability ensures that privacy is consistently practice, allowing them to keep pace with digital transformation while maintaining trust and integrity.
The first line of defense
Within an organization, there may be data protection officers or a team dedicated to overseeing data privacy compliance and risk management, such as our firm’s Anti-Money Laundering and Privacy Group. However, privacy cannot be owned by a single function alone: each individual plays a critical role in ensuring that personal data is handled responsibly.
Most privacy incidents aren’t caused by sophisticated cybercriminals. Sometimes, they arise from simple moments of complacency, whether it’s an email sent to the wrong recipient, a weak password, an improperly shared file, an unsecured device, or a failure to verify authenticity before disclosing information. These seemingly minor lapses emphasize how human behavior, more than technology, often determines the strength of an organization’s data protection posture.
With this, businesses can’t simply implement mandatory sessions and leave it at that. Data privacy awareness and accountability must be continuously reinforced through regular engagement, practical and tailored training, and a culture that empowers individuals to act responsibly. Only when privacy becomes part of everyday thinking and decision-making can organizations truly strengthen resilience and sustain trust in a rapidly evolving digital landscape.
Shaping a data privacy culture
Moving forward, this year’s Privacy Awareness Week served as a call to reflection and action. As we look back on our progress, we must also move forward with greater intention and collective responsibility. In an age where data drives innovation and artificial intelligence continues to reshape the way we live and work, safeguarding personal information must remain anchored in human values.
For organizations, this means embedding privacy into the core of operations, not as an afterthought nor a hindrance to innovation but as a guiding principle and driver of growth. For individuals, it means practicing vigilance in everyday actions and recognizing that even the smallest decisions can have lasting impact. True data protection is achieved not only through systems and policies, but through a shared commitment to doing what is right, consistently and consciously.
As we move forward, the spirit of digital bayanihan reminds us that building a privacy-conscious culture is a collective effort: one that extends beyond a single week and into every interaction, process and decision we make. Let’s reaffirm and realign our commitment to protecting our data and in doing so, strengthen the trust that drives our growth.
Paraluman Andres-Neagoe is a partner for the Tax Advisory & Compliance Practice Area and the oversight partner for the Anti-Money Laundering and Privacy Group at P&A Grant Thornton.
