Wearing a fitness tracking device could earn you cash from your health insurance company. At first, this sounds lucrative for the people who participate, and good for the companies, who want healthier insurance customers. But it’s not quite so simple.

We live in a digitized era. Our professional and personal lives go by the dictum that data should drive our actions and reactions. In the course of doing business, companies receive and handle a significant volume of data, and in many instances, this data will include critical—and sensitive—personal data about individuals, be they customers or even employees. Data is increasingly seen as essential to be competitive and is, in its own way, a currency. However, being a data handler also comes with responsibilities and significant risk. In the Philippines, an archipelago composed of 7,107 islands and a population of over 100 million, legislators realized that legislation needed to catch up with this new digital reality.

The smooth transfer of personal data between the European Union and the UK is of critical importance for many British and Continental businesses and may be jeopardized by the Brexit process. The 1995 EU Directive on Privacy establishes EU citizens’ right to privacy, including the protection of their personal data and the “right to be forgotten” from search engines. Countries that conform to these rules receive “adequacy agreements” that