A woman discovers that her husband may be living with another woman. While gathering evidence for a possible criminal complaint, she finds documents that appear to confirm their living arrangement. The documents include a US visa application, a community tax certificate, and records relating to a vehicle.
Can she use these documents in court without the other woman's consent? And can her lawyer be held liable under the Data Privacy Act for including them in legal pleadings? These questions were addressed by the National Privacy Commission (NPC) in AQM v. PIT, NPT, and CNB, NPC Case No. 22-112, April 18, 2024.
In its decision, the NPC dismissed the complaint against a wife, her son, and their lawyer, finding that the processing of the documents had a lawful basis under Republic Act No. 10173, or the Data Privacy Act of 2012.
The case offers an important reminder: the right to data privacy must be respected, but it cannot automatically prevent a person from pursuing legitimate legal remedies.
The Case: Documents Found in the Family Home
The controversy began with a dispute involving AQM, a woman who was temporarily staying in a family residence in Bacolod City. AQM had been working on a business venture with IT, a married man whose wife was NPT.
According to AQM, she was invited to stay at the residence while waiting for another house to become available. In December 2021, while AQM and IT were away in Boracay, NPT returned to the family home. A disagreement subsequently arose over documents and personal belongings that AQM had left at the property.
Among the documents were her US visa application, community tax certificate, and papers relating to her vehicle. NPT later used these documents to support a criminal complaint for concubinage and proceedings involving a protection order.
AQM objected, arguing that the documents contained her personal and sensitive personal information and had been obtained without her consent. She subsequently filed a complaint before the NPC against NPT, her son PIT, and their lawyer, Atty. CNB.
Are Visa Applications and Personal Documents Protected by the Data Privacy Act?
Yes. The NPC recognized that the documents contained personal information, including AQM's name, address, telephone number, and other identifying details.
Her US visa application also contained sensitive personal information, such as her age, marital status, and passport number.
Under Section 3 of the Data Privacy Act, personal information includes information that identifies or can reasonably identify an individual. Sensitive personal information receives additional protection because of the nature of the details involved.
The Commission also clarified that obtaining documents and subsequently using them as evidence constitute data processing. However, the fact that personal information was processed does not necessarily mean that a violation occurred.
Why Did the NPC Dismiss the Data Privacy Complaint?
The NPC identified two important reasons for dismissing the complaint.
The Alleged Illegal Acquisition of the Documents Was Not Proven
AQM claimed that the respondents entered a separate, digitally locked living area and took her documents without permission. However, the NPC found insufficient evidence establishing that the documents had been unlawfully obtained.
The Commission considered the findings of the investigating prosecutor in a related qualified theft complaint, which had been dismissed because the evidence indicated that the personal belongings had been left at the family residence.
The NPC also noted that AQM herself acknowledged that PIT knew the passcode to the living quarters. Given these circumstances, the Commission concluded that the allegation of unauthorized acquisition had not been established by substantial evidence.
The Documents Were Used to Establish Legal Claims
The second consideration was the purpose for which the documents were used. NPT submitted the documents in connection with a criminal complaint for concubinage and proceedings involving a petition for a permanent protection order. The NPC found that the documents were relevant to allegations that AQM and IT had been living together at the family residence.
Under Section 13(f) of the Data Privacy Act, sensitive personal information may be processed when necessary for the establishment, exercise, or defense of legal claims.
The Commission also recognized a lawful basis under Section 12(f) for processing ordinary personal information in pursuit of legitimate interests. Thus, the respondents did not need AQM's consent when processing the relevant information for these lawful purposes.
Does This Mean Lawyers Can Freely Use Private Documents in Court?
No. The decision does not give lawyers or litigants unrestricted authority to obtain or disclose another person's personal information.
The NPC emphasized that processing for legal claims remains subject to the principles of legitimate purpose and proportionality. This means that documents must be relevant and necessary to the legal proceedings, and their use must not be excessive.
In this case, the NPC found that the documents were used to support allegations in the concubinage complaint and protection-order proceedings. Their submission was therefore consistent with the lawful purposes recognized under the Data Privacy Act.
However, the same reasoning would not automatically justify publishing the documents on social media or sharing them with persons who have no legitimate connection to the proceedings.
Using personal information as evidence is different from exposing someone's private information to the public.
Can a Data Privacy Complaint Be Used to Prevent a Criminal Case?
The NPC's decision makes clear that the Data Privacy Act should not be used to obstruct legitimate legal proceedings.
A person facing a criminal or administrative complaint cannot automatically prevent the opposing party from presenting relevant evidence simply by invoking privacy rights.
However, this does not eliminate the requirement that information must be obtained and processed lawfully. Where documents are stolen, improperly accessed, or disclosed for purposes unrelated to a legitimate claim, separate privacy or other legal issues may arise.
The distinction is important because data privacy rights and the right to pursue legal remedies must be considered together.
What Was the NPC's Final Ruling?
The NPC dismissed the complaint against PIT, NPT, and Atty. CNB for lack of merit.
It found that the acquisition of the documents had not been proven unauthorized and that their subsequent use in the legal proceedings was supported by Sections 12(f) and 13(f) of the Data Privacy Act.
Consequently, the essential element of unauthorized processing was absent.
The ruling illustrates a practical principle: the Data Privacy Act protects individuals against unlawful processing of their information, but it does not automatically prohibit the use of relevant personal documents in legitimate legal proceedings.
Need Legal Assistance With a Data Privacy Complaint?
Disputes involving private documents, marital relationships, criminal complaints, and the use of personal information as evidence often raise complicated legal questions.
Whether you believe your private information has been unlawfully used or are facing a data privacy complaint arising from documents submitted in legal proceedings, Cunanan Law Office provides legal assistance in Data Privacy Act cases, NPC proceedings, family law disputes, and criminal defense matters in the Philippines.
Contact Cunanan Law Office today at inquiries@mpeclaw.com or call (+63) 968-679-6617 to schedule a legal consultation.