🇵🇭
Philippines
Data Privacy Act of 2012
Asia🟢 Comprehensive
Compliance Score
79%
11 Addressed
3 Partial
0 None
Authority
National Privacy Commission (NPC)
Overview
The Philippines' Data Privacy Act, a comprehensive GDPR-like law, established the National Privacy Commission. The NPC actively enforces compliance and issues guidance, making the Philippines a leader in data protection in Southeast Asia.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
PartialData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Philippines?+
Philippines is governed by the Data Privacy Act of 2012. The law is enforced by the National Privacy Commission (NPC). According to our analysis, the country has a Comprehensive level of data protection framework.
Does Philippines require a Data Protection Officer (DPO)?+
Yes, under the Data Privacy Act of 2012, organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Philippines?+
Partially. While Data Privacy Act of 2012 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Philippines?+
Under the Data Privacy Act of 2012, organizations must notify the National Privacy Commission (NPC) and affected individuals without undue delay in the event of a personal data breach.