PASAY CITY, PHILIPPINES, 20 June 2025 —The National Privacy Commission (NPC) awarded SM Retail, the retail subsidiary of SM Investments Corporation with the Privacy Management Program Award during the recently concluded National Data Privacy Conference in Parañaque City, recognizing the company’s consistent and structured efforts in upholding data privacy standards across its operations.
The Privacy Management Program Award is given to organizations that demonstrate effective implementation of privacy policies, proactive risk management, and clear accountability structures in line with the Data Privacy Act of 2012.
SM Retail was cited for its internal training initiatives, integration of privacy practices into day-to-day operations, and for embedding Data Protection Officers within its business units. These measures have contributed to building a strong data protection culture among employees and improving safeguards for customer information.
“We’re grateful for this recognition from the NPC, and we share this accolade with everyone at the SM Group. An effective data privacy management program hinges on strong leadership, active stakeholder engagement, dedicated privacy champions in critical DPA areas, embedded DPOs within the business, and practical, layman-friendly training rooted in real-world scenarios,” said Honeylin Castolo, Vice President of SM Retail.
The Privacy Management Program of SM Retail conducts Data Privacy Awareness training on top of the continuous cybersecurity education for its employees. As the program empowers SM employees to evaluate and assess security risks, this translates to a more secure shopping experience for SM customers.
“This was made possible by the efforts of our Data Privacy Compliance Team led by Leyson N. San Juan, the Data Protection Officer of SM Retail, Inc. and the full support from our different business units,” Castolo shared.
The Data Privacy program of SM Retail is closely monitored by rating agencies as part of SM’s Environmental, Social, and Governance (ESG) performance. This underscores how data privacy is not only important to our customers. It is also a strategic driver that impacts SM Retail’s long-term value and reputation.
“SM Retail effectively implements its data privacy program, reflecting not only our compliance with the Data Privacy Act (DPA) but also our proactive efforts to lead by example across the retail industry. By making data privacy a fundamental part of how we operate, we hope to reinforce our reputation as a brand that our customers can continue to trust.” Castolo said.
Alongside its win for the Privacy Management Program Award, SM Retail was also hailed as a finalist for the NPC Seal of Registration Award. SM Retail’s DPO, Mr. Leyson N. San Juan, likewise was recognized as a finalist for Data Protection Officer (DPO) of the Year.
The awarding ceremony in Paranaque was held during the Privacy Awareness Week (PAW). Led by the National Privacy Commission, PAW is an annual celebration dedicated to strengthening data privacy awareness and promoting responsible personal data processing in the Philippines.
