Regulations › Rest of world › Philippines

DPA (Philippines)

Data Privacy Act of 2012 (Philippines)

In force privacy

WhenEnacted in August 2012 (Republic Act No. 10173)

Who enforces itNational Privacy Commission (NPC)

Who it applies toPersonal information controllers and processors in the Philippines.

Tell the regulatorNotify the NPC within 72 hours of knowledge of a breach involving sensitive or fraud-enabling… DPO requiredEvery personal information controller and processor must designate a DPO or accountable indivi… RegistrationRegister processing systems and DPO if 250+ employees, sensitive data of 1,000+ individuals, o… Transfers abroadNo adequacy regime Request deadlineRespond without undue delay and within 30 working days, extendable by 15 working days for comp… Maximum fineCriminal fines up to PHP 5 million

The Philippines' data privacy law. Organizations designate a data protection officer, and those that meet the thresholds register with the National Privacy Commission.

71% coveredif you already meet GDPR. 6 requirements to work on.See the gap → 5 of 21requirements scored most demanding, each cited to the law.See all 21 → 45 sectionsindexed by topic, each linked to the official text.Read section by section →

The Association's practitioner brief for this law is on the way; the priority laws come first.

Recent developments

Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.

Sources

Text of the law LawPhil (reproduction) · Legislature or public body

Dates and status checked against these sources on 18 October 2026. This page explains the law for practitioners; it is not legal advice.

Data protection authority National Privacy Commission (NPC)

Address: 25th to 27th Floors, The Upper Class Tower, Quezon Avenue corner Scout Reyes Street, Quezon City✓
Email: info@privacy.gov.ph ✓
Complaints: complaints@privacy.gov.ph ✓
Phone: +63 2 5322 1322 ✓
Website: privacy.gov.ph
Register: Registration portal✓
Breaches: Report a breach✓

Checked 18 Oct 2026. ✓ confirmed on the authority's own site. Report a change

Local help in Philippines

Law firms, training centers and other providers in Philippines can apply to be listed here. We check each one before it shows.

List your organization

102 laws in plain words. Free. Associate Membership is free and open to anyone in this work or moving into it. Join free as Associate

Browse the library

US states 40 Rest of world 37 European Union 12 US federal 12 United Kingdom 1

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the map Follow Regulatory Watch

In force
Coming into force
Sector laws

AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL