HOME/All Jurisdictions/PH

PH — Country Profile

Philippines

101TOTAL
56OFFICIAL SOURCES
4TOPIC AREAS
Law / Act37
Executive Order21
National Strategy3
Other40
20 FEB 2026 · Other

Competition Commission market study into intersection of competition and data privacy in social media and search platforms

On 20 February 2026, the Philippine Competition Commission published a market study examining the intersection between competition policy and data privacy on social media and search platforms. The study found that both markets exhibit high levels of concentration, with major established platforms benefiting from extensive and consolidated datasets across integrated services. Examples of such platforms include Meta’s Facebook, Instagram, and WhatsApp, as well as Google’s Gmail, Maps, and YouTu...

✓ ✓ OfficialCompetitionphcc.gov.ph ↗
13 FEB 2026 · Executive Order

Department of Information and Communications Technology cybersecurity initiatives

On 13 February 2026, the Department of Information and Communications Technology (DICT) launched 3 cybersecurity initiatives, the Bug Bounty Program, the DICT Trusted Assessment Provider (D-TAP) framework, and the Cybersecurity Posture Assessment Laboratory (CPAL). The initiatives address the protection of government digital systems and critical infrastructure. The Bug Bounty Program invites the reporting of vulnerabilities in government systems and online services. The D-TAP framework establ...

✓ ✓ OfficialNational Strategypna.gov.ph ↗
02 FEB 2026 · Executive Order

Documentary requirements for accreditation and renewal of cybersecurity testing laboratories under Cybersecurity Posture Assessment Laboratory Framework (Circular No. HRA-003, Series of 2026)

On 2 February 2026, the Department of Information and Communications Technology (DICT) issued Department Circular No. HRA-003, Series of 2026. The circular prescribes the mandatory documentary requirements for the accreditation and renewal of cybersecurity testing laboratories under the Cybersecurity Posture Assessment Laboratory (CPAL) framework. It applies to public and private institutions seeking initial accreditation or renewal to conduct independent technical cybersecurity evaluations o...

✓ ✓ OfficialNational Strategycms-cdn.e.gov.ph ↗
21 JAN 2026 · Other

Department of Information and Communications Technology investigation into xAI over Grok image-generation capabilities

On 21 January 2026, the Department of Information and Communications Technology (DICT) concluded the investigation opened on 16 January 2026 into xAI concerning the image-generation capabilities of its artificial intelligence chatbot, Grok, and lifted the access restriction imposed on that date. The action followed an order to ensure a safe digital space for Filipino users. An inter-agency technical assessment, led by the Cybercrime Investigation and Coordinating Center (CICC) and the Nationa...

✓ ✓ OfficialContent Moderationdict.gov.ph ↗
02 NOV 2025 · Other

Turkey and Philippines Memorandum of Understanding to enhance data protection cooperation

On 11 February 2025, the Turkish Data Protection Authority (KVKK) and the National Privacy Commission (NPC) of the Philippines signed a memorandum of understanding (MoU) to enhance cooperation in data protection and explore joint initiatives on personal data privacy. The MoU establishes a framework for collaboration and promoting the exchange of good practices between the respective institutions.

✓ ✓ OfficialNational Strategykvkk.gov.tr ↗
13 OCT 2025 · Other

National Privacy Commission's statement on nature of registration and its jurisdiction under Data Privacy Act 2012

On 13 October 2025, the National Privacy Commission (NPC) issued a statement reaffirming its role as the Philippines’ independent data protection authority under the Data Privacy Act of 2012. The statement clarified that registration with the Commission does not imply approval or confirmation of lawful data processing. It stressed that organisations remain responsible for compliance and safeguarding personal data. The NPC also stressed its exclusive authority to determine the legality of data...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
23 SEP 2025 · Other

National Privacy Commission investigation into Tools for Humanity over alleged data privacy violations

On 23 September 2025, the National Privacy Commission (NPC) issued a cease-and-desist order (CDO) against Tools for Humanity (TFH), the entity operating the World App and Orb verification system. The order prohibits making the World App available, conducting Orb device verification, and transferring or sharing any previously collected personal data. TFH is also required to submit the total number of Filipino registrants and its operating locations. The NPC found that TFH's data processing pra...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
27 AUG 2025 · Executive Order

National Privacy Commission Advisory on privacy engineering in systems life cycle processes (No. 2025-02)

On 27 August 2025, the Philippines' National Privacy Commission adopted an Advisory establishing guidelines on privacy engineering in systems life cycle processes. The Advisory applies to all personal information controllers and personal information processors engaged in processing personal data through data processing systems. The Advisory emphasises privacy-by-design and privacy-by-default implementation across five system development stages, including planning and requirements gathering, d...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
09 AUG 2025 · Law / Act

Data protection regulation in Open Access in Data Transmission Act (Act No. 12234)

On 8 September 2025, the Open Access in Data Transmission Act, including data protection regulation, enters into force. The Act embeds data protection by requiring providers to safeguard the confidentiality, integrity, and security of transmitted information. It also mandates full compliance with the Data Privacy Act and related cybersecurity laws under the oversight of the National Privacy Commission. It guarantees end users' rights to privacy and non-discriminatory access, prohibits unlawfu...

✓ ✓ OfficialNational Strategyofficialgazette.gov.ph ↗
03 JUL 2025 · Other

Department of Trade and Industry engagement with Meta's Consumer Policy Channel for e-commerce oversight

On 7 March 2025, the Philippine Department of Trade and Industry (DTI), through its Fair Trade Enforcement Bureau and E-Commerce Bureau, met with Meta to initiate the onboarding process to Meta's Consumer Policy Channel (CPC). The CPC is a system provided by Meta that enables regulatory agencies to track transactions on Facebook, submit reports of potential violations, and request content takedowns using a combination of user reports, automated detection, and human review. The CPC is applicab...

Content Moderationdti.gov.ph ↗
27 JUN 2025 · Other

National Privacy Commission guidelines on accountability of influencers and content creators

On 27 June 2025, the National Privacy Commission (NPC) closes its consultation on the guidelines on accountability of influencers and content creators. The consultation sought input from stakeholders on the processing of personal data by influencers and content creators, including the types of personal data processed, legal basis for processing, consent and transparency mechanisms, specific risks, challenges encountered, requests for deletion, existing safeguards, awareness of the Data Privac...

National Strategyprivacy.gov.ph ↗
30 MAY 2025 · Other

National Privacy Commission guidelines on biometric data

On 30 May 2025, the National Privacy Commission (NPC) closes its consultation on the implementation of international data protection standards in the country. The initiative is part of the development of regulations under the Data Privacy Act of 2012, with a specific focus on the drafting of guidelines on biometric data. Stakeholders and the public are invited to provide information on use cases related to biometric data, including physical, physiological, or behavioural characteristics for u...

National Strategyprivacy.gov.ph ↗
27 MAR 2025 · Other

Competition Commission and National Privacy Commission inquiry into competition and data privacy approaches among platform intermediaries and search services

On 19 March 2025, the Philippine Competition Commission (PCC) and the National Privacy Commission (NPC) announced an inquiry examining the intersection of data privacy and competition policy among social media and search platforms. The inquiry focuses on the market power of large technology firms, including Meta and Google. The inquiry highlighted concerns including consumer choice in data collection, the role of data portability and interoperability in fostering competition, and challenges p...

Competitionphcc.gov.ph ↗
07 FEB 2025 · Law / Act

Data protection regulation in Artificial Intelligence Regulation Act (AIRA/SBN-25)

On 2 July 2025, the Artificial Intelligence Regulation Act (AIRA/SBN-25), which includes data protection regulation, was introduced to the Senate. AIRA creates a regulatory regime for the development and use of AI, including artificial general intelligence (AGI), artificial superintelligence (ASI), and AI foundation models, and applies to all AI developers and deployers in the Philippines. Under AIRA, one of the conditions for mandatory registration of AI systems under section 12 would be the...

National Strategyweb.senate.gov.ph ↗
07 FEB 2025 · Law / Act

Content moderation authority governance in Bill regulating the use of Social Media Platforms by Minors

On 2 July 2025, Bill Regulating the Use of Social Media Platforms by Minors (Bill No. 40), content moderation authority governance, was introduced to the Senate. The Bill establishes age restrictions for social media use, prohibiting individuals under 18 from accessing such platforms. It requires providers to implement age verification measures, including options such as ID checks or facial recognition. The Department of Information and Communications Technology (DICT) is tasked with overseei...

Content Moderationsenate.gov.ph ↗
07 FEB 2025 · Law / Act

Authorisation of goods or services requirement in Artificial Intelligence Regulation Act (AIRA/SBN-25)

On 2 July 2025, the Artificial Intelligence Regulation Act (AIRA/SBN-25), which includes an authorisation requirement, was introduced to the Senate. AIRA creates a regulatory regime for the development and use of AI, including artificial general intelligence (AGI), artificial superintelligence (ASI), and AI foundation models, and applies to all AI developers and deployers in the Philippines. AIRA would give the National AI Commission (NAIC) the responsibility to certify and monitor AI-related...

National Strategyweb.senate.gov.ph ↗
19 DEC 2024 · Other

NPC guidelines on AI Systems and Data Privacy Act of 2012

On 19 December 2024, the National Privacy Commission (NPC) issued guidelines for applying the Data Privacy Act of 2012 (DPA) to processing personal data in AI system development or deployment. The guidelines support compliance with the Act, covering privacy principles and ethical considerations. The guideline's provisions include supporting data subjects' rights, conducting Privacy Impact Assessments (PIA), adopting privacy-by-design principles, limiting biases in AI systems, data minimisatio...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
17 DEC 2024 · Other

NPC Guidelines on Child-Oriented Transparency (No. 2024 - 03)

On 17 December 2024, the National Privacy Commission (NPC) of the Philippines adopted the Guidelines on Child-Oriented Transparency (No. 2024-03). These guidelines apply to all Personal Information Controllers (PICs) and Personal Information Processors (PIPs) engaged in the processing of children’s personal data across various sectors. The guidelines mandate the incorporation of Child Privacy Impact Assessments (CPIAs) into Privacy Impact Assessments (PIAs), the implementation of age assuranc...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
08 DEC 2024 · Executive Order

NPC Advisory Opinion on Personal Data Processing under Section 13 (f) of the Data Privacy Act of 2012

On 12 August 2024, the National Privacy Commission (NPC) of the Philippines adopted an advisory opinion on personal data processing based on Section 13 (f) of the Data Privacy Act of 2012. The advisory aims to clarify the lawful basis for processing personal data by personal information controllers (PICs), particularly in relation to the functions of public authorities. It establishes the conditions under which personal data processing is considered necessary, including for the protection of ...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
08 DEC 2024 · Other

Guidelines on personal data processing under Section 13(f) of the Data Privacy Act of 2012 clarifying the basis for processing personal data

On 12 August 2024, the National Privacy Commission of the Philippines adopted guidelines clarifying the application of Section 13(f) of the Data Privacy Act of 2012 as the basis for processing personal data. The section allows the processing of sensitive personal and privileged information when necessary for the protection of lawful rights and interests in court proceedings, or for the establishment, exercise, or defence of legal claims, or when provided to government or public authority. The...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
07 DEC 2024 · Other

BSP advisory against fraudulent social media content

On 12 July 2024, the Central Bank of the Philippines (BSP) issued an advisory on the proliferation of scams utilising artificial intelligence to fabricate convincing fake videos and audio aimed at spreading misinformation about the BSP and its officials. The BSP clarified that it does not endorse any cryptocurrency projects, including the Tesler Code, and urged the public to exercise caution, avoid disclosing personal information to unverified sources, verify communications from BSP represent...

✓ ✓ OfficialConsumer Protectionbsp.gov.ph ↗
03 DEC 2024 · Law / Act

Act Prohibiting Online Publication and Promotion of Gambling Related Content Providing Penalties Therefor and for Other Purposes (SB No. 2602)

On 12 March 2024, the Act Prohibiting Online Publication and Promotion of Gambling-Related Content Providing Penalties Therefor and for Other Purposes (SB No. 2602) was introduced in the Senate of the Philippines. The Act would prohibit natural and juridical persons from distributing or advertising gambling-related content online. In the event of a violation, the Department of Justice (DOJ) would be authorised to issue a disabling order to restrict or block access to such content. Additionall...

Content Moderationlegacy.senate.gov.ph ↗
26 NOV 2024 · Other

Philippines-Republic of Korea Memorandum of Understanding on Cooperation in Data Protection

On 26 November 2024, the Korean Personal Information Protection Commission and the National Privacy Commission of the Philippines signed a Memorandum of Understanding for collaboration on personal data protection. Key areas of collaboration include conducting joint investigations on personal data breaches, developing trusted data transfer mechanisms to support cross-border data flows, and improving interoperability between data protection systems.

✓ ✓ OfficialNational Strategypipc.go.kr ↗
26 NOV 2024 · Other

PIPC-NPC MoU on enhancing cooperation in personal data protection

On 26 November 2024, the Personal Information Protection Commission (PIPC) of South Korea and the National Privacy Commission (NPC) of the Philippines signed a Memorandum of Understanding (MoU) to enhance cooperation in personal data protection. The MoU aims to support secure cross-border data flows, foster joint investigations, and promote the development of compatible data protection mechanisms. Additionally, the agreement focuses on knowledge sharing, training, and educational initiatives ...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
18 OCT 2024 · Law / Act

VAT on digital services in Bill Amending and Adding New Sections of the National Internal Revenue Code (SB No. 2528)

On 18 October 2024, the Bill Amending and Adding New Sections of the National Internal Revenue Code, including 12% VAT on digital services (SB No. 2528), enters into force. The Bill mandates nonresident digital services providers (DSP) to register for and collect a 12% value-added tax (VAT) on digital services consumed in the country. The digital services include online search engines, marketplaces, cloud services, media and advertising, platforms, and digital goods. Under the Bill, certain s...

National Strategylegacy.senate.gov.ph ↗
02 OCT 2024 · Executive Order

NPC Circular 2024-01 Containing Amendments to Rules of Procedure of the National Privacy Commission

On 10 February 2024, the National Privacy Commission of the Philippines implemented its Amendments to the rules of procedure of the National Privacy Commission. Notably, the Amendments include changes to the Commission’s powers, including its conduct of sua sponte investigations where a data breach notification is not brought, and the conduct of various modes of compliance checks. The Amendments extend the list of definitions to include, among others, hearing officers, mediation officers, med...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
01 OCT 2024 · Other

CICC outline for AI utilisation in social media platforms for combating scams

On 10 January 2024, the Cybercrime Investigation and Coordinating Center outlined its call for social media platforms and online service providers to utilise artificial intelligence (AI) in combating cybercrimes, particularly scams. This outline encourages social media and online service providers to take action to prevent the re-emergence of scams under new profiles with similar content. CICC highlighted that the Internet Transactions Act of 2023 empowers the CICC to seek penalties against p...

✓ ✓ OfficialContent Moderationpna.gov.ph ↗
26 SEP 2024 · Executive Order

COMELEC guidelines on the use of social media, artificial intelligence and internet technology for the 2025 elections and the BARMM parliamentary elections

On 26 September 2024, the Commission on Election's resolution No. 11064, establishing regulations for the use of artificial intelligence (AI) and social media in digital campaigns for the 2025 national, local, and BARMM parliamentary elections, enters into force. The resolution mandates candidates and political parties to register all digital campaign platforms by 13 December 2024, ensuring compliance with transparency requirements, including disclosing AI usage in campaign materials. The res...

✓ ✓ OfficialContent Moderationcomelec.gov.ph ↗
18 SEP 2024 · Law / Act

Artificial Intelligence Act (HB 10944)

On 18 September 2024, the Artificial Intelligence Act (HB 10944) was introduced into the Philippine House of Representatives. The Act would create the Philippine Artificial Intelligence Board (PAIB) and task it with ensuring the development, research, application and use of AI systems, ensure compliance with the Act and, in case of non-compliance, impose and collect fines and penalties, conduct investigations. Furthermore, the Act would require the PAIB to maintain a central database of AI co...

National Strategydocs.congress.hrep.online ↗
03 SEP 2024 · Law / Act

Movie and Television Review and Classification Board Act (SB No. 2805)

On 9 March 2024, the Movie and Television Review and Classification Board Act (SB No. 2805) was introduced to the Senate of the Philippines, substituting the Video and Online Games and Outdoor Media Regulation Act (SB No.1063). The Act would amend the purpose of presidential decree No. 1986, known as "creating the Movie and Television Review and Classification Board (MTRCB)". The Act would expand MTRCB's jurisdiction to include online curated content services, defined as streaming services, t...

Content Moderationlegacy.senate.gov.ph ↗
11 JUN 2024 · Executive Order

NPC guidelines on child-oriented transparency to protect children's personal data in accordance with the Data Privacy Act (DPA)

On 6 November 2024, the Philippine National Privacy Commission (NPC) closes the consultation on guidelines on child-oriented transparency to protect children's personal data in accordance with the Data Privacy Act (DPA) of 2012. The guidelines outline the responsibilities of Personal Information Controllers (PICs) when processing children's data, ensuring that appropriate security measures are in place to safeguard the best interests and evolving capacities of children. The scope of the guide...

National Strategyprivacy.gov.ph ↗
30 MAY 2024 · Other

NPC advisory on model contractual clauses for cross-border transfers of personal data

On 30 May 2024, the Philippine National Privacy Commission (NPC) issued an advisory on model contractual clauses (MCCs) for cross-border transfers of personal data. The advisory aligns with the Data Privacy Act of 2012 (DPA), which protects privacy rights while ensuring the free flow of information to promote growth and innovation. The NPC is part of the Global Privacy Assembly (GPA) and its Global Frameworks and Standards Working Group (GFSWG), which published a comparative guide on MCCs fro...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
27 MAY 2024 · Executive Order

National Privacy Commission Guidelines on Consent (Circular No. 2023-04)

On 27 May 2024, the obligations under the National Privacy Commission (NPC)’s guidelines on consent (circular No. 2023-04) enter into force. The guidelines outline the rules personal information controllers (PICs) are required to follow when collecting and processing personal data based on an individual’s consent. The guideline specifies what constitutes valid consent and how it shall be obtained and managed in compliance with the Implementing Rules and Regulations of the Data Privacy Act. In...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
23 MAY 2024 · Law / Act

Foreign Adversary Controlled Applications Regulation Act (HB No. 10489)

On 23 May 2024, the Foreign Adversary Controlled Applications Regulation Act (HB No. 10489) was introduced in the House of Representatives of the Philippines. The Act would prohibit the operation of foreign adversary-controlled applications within the Philippines, targeting entities that distribute, maintain, or update such applications through app stores or internet hosting services. Companies fall under the Act if they permit users to create an account to share and view text, images and vid...

Content Moderationdocs.congress.hrep.online ↗
13 MAY 2024 · Law / Act

AI Regulation Act (HB 10385)

On 13 May 2024, the Al Regulation Act (HB 10385) was introduced into the Philippine House of Representatives. The Act would establish the Artificial Intelligence Bureau with the goal of ensuring technical development while ensuring workers’ rights and preventing job displacement through AI. The Bureau would be tasked with developing a national AI development and regulation strategy, ensuring research and development, introducing rules and regulations to prevent displacement in the job due to ...

National Strategydocs.congress.hrep.online ↗
06 MAY 2024 · Other

NPC notice to businesses processing personal data without registering

On 5 June 2024, the National Privacy Commission (NPC) issued a warning to businesses processing personal data without registering with the NPC. Non-compliance with the Data Privacy Act of 2012 (DPA) and related NPC orders will result in show-cause orders. NPC Circular No. 2022-04 mandates the registration of data processing systems and data protection officers for businesses processing personal data of 250 or more employees, 1’000 or more customers, or data posing significant risks to data su...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
04 MAY 2024 · Other

Philippines-United Arab Emirates Memorandum of Understanding on personal data security and protection

On 5 April 2024, the Philippine National Privacy Commission (NPC) and the Dubai International Financial Centre (DIFC) signed a Memorandum of Understanding (MoU) to enhance their cooperation in data privacy and security. The MoU aims to strengthen the partnership between the two countries facing challenges and opportunities presented by digitalisation in both the public and private sectors. The MoU outlines commitments to assist in the enforcement of data protection laws, conducting joint inve...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
18 APR 2024 · Other

DICT memorandum on the principles and guidelines for the ethical and trustworthy use of AI in the government

On 18 April 2024, the Department of Information And Communications Technology of the Philippines published a draft memorandum on the principles and guidelines for the ethical and trustworthy use of Artificial Intelligence (AI) in the government. The principles apply to the executive branch, government-owned and controlled corporations, and local government units and encourage other branches to adopt the principles to foster ethical AI usage in the Philippines. The principles aim to ensure the...

National Strategydict.gov.ph ↗
13 APR 2024 · Executive Order

NPC Guideline on legitimate interest (NPC Circular No. 2023 - 07)

On 13 April 2024, the National Privacy Commission (NPC) guidelines on legitimate interest entered into force. The guidelines apply to controllers and third parties that process or are involved in the processing of personal data on the lawful basis of the legitimate interest. Processing based on legitimate interest necessitates meeting specific criteria, such as establishing a genuine interest, ensuring the necessity and lawfulness of the chosen means, and ensuring legitimacy without violating...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗
30 MAR 2024 · Executive Order

National Privacy Commission (NPC) Circular 2023-06 on Security of Personal Data in the Government and Private Sector

On 30 March 2024, the National Privacy Commission (NPC) Circular 2023-06 Security of Personal Data in the Government and Private Sector entered into force. The Circular provides updated requirements for the security of personal data processed by personal information controllers (PICs) or personal information processors (PIPs). The requirements include the designation and registration of a data protection officer, the registration of data processing systems, conducting privacy impact assessmen...

✓ ✓ OfficialNational Strategyprivacy.gov.ph ↗