Unlike many of the data protection laws in the US and Europe, the Philippines doesn’t just specify fines for those found to be negligent in protecting customer data. For some information security offenses, the perpetrators can be imprisoned for up to six years .