
SM Retail, the retail arm of the SM group, won the Privacy Management Program Award during the recently concluded National Data Privacy Conference in Paranaque City. In photo are (from left to right) Atty. Reinier Jeffrey Abdon, SM Retail DPA Compliance; Atty. Rafael Kieran Monday, SM Retail DPA Compliance; Atty. Nerissa De Jesus, Deputy Privacy Commissioner, National Privacy Commission; Atty. John Henry Naga, Privacy Commissioner and Chairman, National Privacy Commission; Ms. Honeylin Castolo, Vice President, SM Retail; Mr. Leyson San Juan, Assistant Vice President and Data Protection Officer, SM Retail DPA Compliance; Atty. Jose Amelito S. Belarmino II, Deputy Privacy Commissioner, National Privacy Commission; Atty. Ivin Ronald D.M. Alzona, Executive Director, National Privacy Commission.
SM Retail, the retail arm of SM Investments Corporation, has received the Privacy Management Program Award from the National Privacy Commission (NPC), recognizing the company’s strong and structured commitment to upholding data privacy standards across its operations.
The award was given during the National Data Privacy Conference held in Parañaque City, where SM Retail was honored for effectively implementing privacy policies, proactively managing data privacy risks, and maintaining accountability measures in line with the Data Privacy Act of 2012.
Among the practices that earned SM Retail the recognition were its internal training initiatives, the integration of privacy protocols into everyday business operations, and the assignment of Data Protection Officers (DPOs) across its various units. These efforts have helped foster a company-wide culture of data protection and strengthened safeguards for customer information.
“We’re grateful for this recognition from the NPC, and we share this accolade with everyone at the SM Group,” said Honeylin Castolo, Vice President of SM Retail. “An effective data privacy management program hinges on strong leadership, active stakeholder engagement, dedicated privacy champions, and practical, real-world training that resonates with employees.”

SM Retail won the Privacy Management Program Award during the recently concluded National Data Privacy Conference in Paranaque City.
SM Retail’s program includes Data Privacy Awareness training and continuous cybersecurity education, enabling employees to better assess security risks. According to Castolo, this contributes to a safer shopping experience for customers. She also credited the company’s Data Privacy Compliance Team, led by DPO Leyson N. San Juan, for the award.
The company’s privacy program is also monitored by rating agencies as part of SM’s Environmental, Social, and Governance (ESG) performance metrics—highlighting how data privacy impacts both customer trust and long-term business value.
“Data privacy is not just about compliance. It’s a strategic element of our operations and a key factor in maintaining the trust of our customers,” Castolo added.
In addition to the Privacy Management Program Award, SM Retail was named a finalist for the NPC Seal of Registration Award, while DPO Leyson N. San Juan was also a finalist for Data Protection Officer of the Year.
The awarding ceremony took place as part of Privacy Awareness Week (PAW), an annual initiative led by the NPC to promote responsible data handling and strengthen public understanding of personal data rights in the Philippines.