The Bangko Sentral ng Pilipinas (BSP), the central monetary authority of the Philippines, has formalized its expanded investigative powers under the Anti-Financial Account Scamming Act (AFASA) through Circular 1214. This new regulation permits the BSP's Consumer Account Protection Office (CAPO) to access financial account information without violating existing laws governing bank secrecy and data privacy.

As outlined in Circular 1214, CAPO is authorized to conduct inquiries into bank accounts, e-wallets, and other financial accounts suspected of involvement in scams, including but not limited to phishing, money muling, and social engineering schemes.

The circular specifies that provisions from key legislations such as Republic Act 1405, known as the Secrecy of Bank Deposits Law, the Foreign Currency Deposit Act, the Revised Non-Stock Savings and Loan Association Act, and the Data Privacy Act, will not hinder the BSP's investigation into financial accounts.

To initiate an inquiry, CAPO requires a formal request from a competent authority, which could include relevant government bodies or law enforcement agencies.

This request must be supported by affidavits and transaction records pertinent to the investigation.

Following this, the BSP will issue an inquiry order, compelling the respective financial institution to provide all relevant account documentation while simultaneously forbidding any disclosure to the implicated account holder.

The circular also imposes criminal and administrative liabilities on any individual disclosing information for unauthorized purposes, ensuring that the integrity of the investigative process is maintained.

In maintaining secure data handling, any agency requesting information from the BSP must have an established information sharing agreement in place, adhering to stringent confidentiality protocols that encompass encryption, audit trails, and restricted access prior to data transmission.

Additionally, CAPO is permitted to initiate investigations on its own accord and may seek cybercrime warrants or preservation orders as stipulated under the Cybercrime Prevention Act.

Financial institutions are now required to register up to three official email accounts for all communications related to CAPO investigations, with submissions from unregistered email addresses being deemed unacceptable.

The BSP further stated that any correspondence sent to registered email accounts will be considered received, placing the onus of monitoring and securing these channels on the financial institutions.

Circular 1214 will take effect 15 days following its publication, marking a significant step in the Philippine government's efforts to combat financial scams and protect consumers in the digital space.