Philippines · Privacy & Data Protection
The country's own data-protection regime, registration duties, and its official supervisory authority.
AI-drafted, editorially reviewed. Confirm specifics with the official authority.
Personal data is governed by the Data Privacy Act of 2012 and enforced by the National Privacy Commission. Organisations processing personal data at scale must appoint a Data Protection Officer and register their data processing systems with the Commission, keep processing lawful and proportionate, and notify the Commission and affected individuals of breaches that meet the notification criteria. The Act reaches processing about Philippine residents even where the processor sits abroad.
- Covered organisations appoint a Data Protection Officer and register their processing systems.
- Breaches meeting the notification criteria must be reported to the Commission and to those affected.
- The Act can apply to processing carried out abroad when it concerns Philippine residents.
Official authorities
- National Privacy Commission (NPC)
Data Privacy Act registration, guidance and enforcement.
Official-information aggregation, not legal advice. Always verify on the authority's own site.