01

What the evidence says

The Philippine Data Privacy Act applies where personal data is processed; not every energy data point is personal data.

Cybersecurity also protects availability and physical service, not only confidentiality.

02

What a business should do next

  1. Ask who can change setpoints and how access is revoked.
  2. Test safe operation during internet and vendor-platform loss.