Imagine discovering that your spouse is allegedly having an affair. You find photographs, private conversations, and a child's birth certificate that appear to support your suspicions. Can you submit these documents as evidence in an administrative complaint without violating the Data Privacy Act?
The National Privacy Commission (NPC) addressed a similar situation in EFD v. AOD, NPC Case No. 22-042, August 12, 2024. In its decision, the NPC dismissed a data privacy complaint filed by a teacher against a woman who submitted photographs, text messages, and a child's birth certificate as supporting evidence in an administrative case before the Department of Education (DepEd).
The ruling highlights an important principle: the Data Privacy Act protects personal information, but it does not automatically prohibit its use for legitimate legal claims.
The Case: An Alleged Affair Leads to a DepEd Complaint
The controversy began when AOD discovered that her husband allegedly had an extramarital relationship with EFD, a public school teacher.
According to AOD, she discovered a child's birth certificate that led her to confront her husband about the relationship. She also found photographs and messages exchanged between her husband and EFD.
Believing that the alleged relationship constituted disgraceful and immoral conduct, AOD filed an administrative complaint against EFD before the Department of Education. To support her allegations, she attached copies of the child's birth certificate, photographs, and exchanges of text messages.
EFD subsequently filed a complaint before the NPC, claiming that AOD had violated her privacy rights by obtaining and using these documents without her consent. She sought damages, the deletion of the materials, and the exclusion of the evidence from the administrative proceedings.
Does the Data Privacy Act Prohibit the Use of Private Information as Evidence?
Not necessarily. Under Republic Act No. 10173, or the Data Privacy Act of 2012, personal information generally must be processed in accordance with lawful criteria.
The NPC acknowledged that photographs, private messages, and birth certificates may contain personal information protected by law. A child's birth certificate may also contain sensitive personal information, including details concerning age, religion, and other protected attributes.
However, the Commission emphasized that consent is not the only lawful basis for processing personal information. This distinction became central to its ruling.
When Can Personal Information Be Used to Establish Legal Claims?
Section 13(f) of the Data Privacy Act permits the processing of sensitive personal information when necessary for the establishment, exercise, or defense of legal claims, among other recognized circumstances.
Similarly, Section 12(f) recognizes legitimate interests as a lawful basis for processing ordinary personal information, subject to the safeguards provided by law.
In this case, AOD submitted the documents to DepEd to support her administrative complaint alleging immoral conduct. The NPC found that the birth certificate, photographs, and messages were relevant to establishing her allegations.
Their submission was therefore connected to a legitimate legal purpose rather than an unrelated attempt to expose EFD's personal life. The Commission concluded that the use of these documents as evidence in the DepEd proceedings had a lawful basis under Sections 12(f) and 13(f).
What About the Allegation That the Documents Were Illegally Obtained?
EFD also argued that AOD had improperly accessed her husband's private communications and obtained the child's birth certificate without lawful authority. She invoked the constitutional protection of private communications and questioned the admissibility of the documents.
However, the NPC found that these allegations were not supported by sufficient evidence. The Commission explained that claims of illegal acquisition cannot rest on suspicions alone. A party alleging a violation must establish the relevant facts through evidence.
In this case, EFD failed to sufficiently prove that the birth certificate and other documents had been unlawfully obtained.
Consequently, the NPC found no basis to hold AOD liable for the alleged unauthorized processing or disclosure.
Importantly, the decision did not establish that accessing another person's password-protected communications is always lawful. Rather, the NPC resolved the particular allegations based on the evidence presented.
Does This Mean Private Messages Can Always Be Used in Legal Cases?
No. The NPC's ruling should not be interpreted as unrestricted permission to obtain, copy, or disclose private communications.
A lawful purpose does not necessarily excuse an independently unlawful method of obtaining evidence. Likewise, the use of personal information must remain consistent with the principles of legitimate purpose and proportionality.
There is an important difference between submitting relevant documents to a government agency handling an administrative complaint and publishing the same documents on Facebook to embarrass another person.
The former may be legally justified under the circumstances, while the latter may raise separate privacy concerns. Each situation requires an examination of how the information was obtained, why it was used, and whether the disclosure was necessary.
Why Did the NPC Dismiss the Complaint?
Ultimately, the NPC found that AOD had a lawful basis for submitting the documents in support of her DepEd complaint.
The Commission also found insufficient evidence to establish the allegations that the materials had been illegally obtained. Accordingly, it dismissed the complaint for violations of Sections 25, 31, and 32 of the Data Privacy Act.
The ruling does not determine whether the teacher actually committed the alleged immoral conduct. That issue belongs to the administrative proceedings before the proper authority.
Instead, the decision clarifies that the legitimate use of personal information to establish a legal claim does not automatically amount to a data privacy violation merely because the data subject did not consent.
Need Legal Assistance With a Data Privacy Complaint?
Disputes involving private messages, photographs, birth certificates, and other personal information frequently arise in administrative, employment, and family-related proceedings.
Whether their use is lawful depends on the circumstances, the applicable legal basis, and the evidence supporting the allegations.
Cunanan Law Office provides legal assistance in data privacy complaints, administrative proceedings, and cases involving the use of personal information as evidence under Philippine law.
Contact Cunanan Law Office today at inquiries@mpeclaw.com or call (+63) 968-679-6617 to schedule a legal consultation.