The National Privacy Commission (NPC) explains that identity theft stems from multiple sources and cannot be solely attributed to information in the Bureau of Internal Revenue's (BIR) registration seal QR code.
The National Privacy Commission (NPC) of the Philippines has addressed concerns regarding the potential for identity theft linked to the QR code found on the Bureau of Internal Revenue’s (BIR) registration seal badge. According to NPC Deputy Commissioner Jose Belarmino II, identity theft and other cyber abuses result from a combination of factors, involving various pieces of personal information gathered from multiple sources online, not solely from the QR code on the BIR seal.
The statement follows apprehensions expressed by online sellers and creators about a BIR memorandum mandating the display of a BIR-issued registration seal on websites, e-commerce platforms, or social media accounts as proof of official taxpayer registration. The QR code embedded in the seal reveals an individual’s registered full name and masked digits of their Tax Identification Number (TIN), but the NPC clarified that a person’s name is not considered sensitive personal information under current privacy laws. Nonetheless, it acknowledged that knowing a full name often marks the beginning phase of identity theft.
Deputy Commissioner Belarmino emphasized that identity theft typically combines publicly posted information and data obtained from breaches or other collection methods. He cautioned online sellers and creators to be vigilant about their online presence, as seemingly harmless data, when pieced together, can facilitate criminal activities in the digital space.
Following the concerns, the BIR has suspended the compulsory display of the registration seal badge to allow for the orderly implementation of their verification measures. BIR Commissioner Charlito Martin Mendoza reassured taxpayers that those who already possess the seal may continue displaying it voluntarily and that no penalties will be imposed for non-display during the suspension period.
The NPC also noted that explanations regarding the necessity of specific details on the registration seal rest with the BIR as the data controller. The public is advised to await further clarifications from the BIR itself.
This clarification by the NPC aims to inform the public that while transparency and official seals help verify online taxpayer registration, protecting against identity theft requires comprehensive personal data security and cautious online behavior.
Sources referenced:
- https://www.gmanetwork.com/news/topstories/content/1007263/identity-theft-cannot-be-traced-to-bir-seal-qr-code-alone-says-privacy-body/story/