NPC Investigates Voter List Display After COMELEC Fails to Execute Privacy Safeguards

Just days after the May 12, 2025 elections, the National Privacy Commission (NPC) has begun investigating reports that personal voter information, including names, photos, and home addresses, was publicly displayed outside polling precincts. These lists, known as the Posted Computerized Voters’ Lists (PCVLs), were reportedly posted in areas visible to the general public, sparking concerns over data privacy and potential misuse.

What makes this situation more complicated is that less than a year ago, the NPC had given the Commission on Elections (COMELEC) a conditional go-ahead to include voters’ photos on precinct lists. Back in June 2024, Comelec sought the NPC’s opinion on whether placing names and pictures outside polling stations would violate privacy laws. The NPC responded by saying the plan was not outright prohibited, but emphasized the need for risk assessment and proper data protection measures.

COMELEC Chair George Garcia saw this as a positive sign. The goal, he said, was to help voters quickly find their names and ease confusion on election day. It sounded simple enough, and with the NPC’s response, the plan moved forward.

Fast forward to today, however, and that plan is now being questioned, not because of the idea itself, but because of how it was carried out. Based on reports, the safeguards the NPC emphasized may not have been fully implemented. Lists were posted on bulletin boards outside voting centers, with no clear controls in place to prevent photos being taken or shared online. This public exposure is what triggered the new wave of complaints.

I personally saw these lists taped outside the voting centers. Out of curiosity, I pretended to take a photo (complete with flash and shutter sound) of a page containing my information using my phone, no one stopped me. There were no warning signs, no staff monitoring the area, nothing. That moment stuck with me, because if I, a regular voter, could do that so easily, then someone with bad intentions could have done it too.

If I were a scammer or criminal, I could have walked away with a goldmine of personal data. Full names, faces, and addresses, all neatly laid out and ready to be misused.

The NPC has now warned that taking or sharing images of these lists without consent may have legal consequences. They're asking those with information or evidence to reach out and help in the investigation.

This case shows how good intentions can fall apart when the execution lacks care. While improving voter experience is important, protecting personal data is equally critical, especially when it’s being handled in such a public setting. This situation might be a lesson for agencies to never skip the fine print when dealing with privacy.

(via NPC / PIA - Photos via Smartmatic)