Competition Commission market study into intersection of competition and data privacy in social media and search platforms

On 20 February 2026, the Philippine Competition Commission published a market study examining the intersection between competition policy and data privacy on social media and search platforms. The study found that both markets exhibit high levels of concentration, with major established platforms benefiting from extensive and consolidated datasets across integrated services. Examples of such platforms include Meta’s Facebook, Instagram, and WhatsApp, as well as Google’s Gmail, Maps, and YouTu...

Official materialCompetitionOfficial source · phcc.gov.ph ↗

13 FEB 2026 · Executive Order

Department of Information and Communications Technology cybersecurity initiatives

On 13 February 2026, the Department of Information and Communications Technology (DICT) launched 3 cybersecurity initiatives, the Bug Bounty Program, the DICT Trusted Assessment Provider (D-TAP) framework, and the Cybersecurity Posture Assessment Laboratory (CPAL). The initiatives address the protection of government digital systems and critical infrastructure. The Bug Bounty Program invites the reporting of vulnerabilities in government systems and online services. The D-TAP framework establ...

Primary legal sourceNational StrategyOfficial source · pna.gov.ph ↗

02 FEB 2026 · Executive Order

Documentary requirements for accreditation and renewal of cybersecurity testing laboratories under Cybersecurity Posture Assessment Laboratory Framework (Circular No. HRA-003, Series of 2026)

On 2 February 2026, the Department of Information and Communications Technology (DICT) issued Department Circular No. HRA-003, Series of 2026. The circular prescribes the mandatory documentary requirements for the accreditation and renewal of cybersecurity testing laboratories under the Cybersecurity Posture Assessment Laboratory (CPAL) framework. It applies to public and private institutions seeking initial accreditation or renewal to conduct independent technical cybersecurity evaluations o...

Primary legal sourceNational StrategyOfficial source · cms-cdn.e.gov.ph ↗

21 JAN 2026 · Other

Department of Information and Communications Technology investigation into xAI over Grok image-generation capabilities

On 21 January 2026, the Department of Information and Communications Technology (DICT) concluded the investigation opened on 16 January 2026 into xAI concerning the image-generation capabilities of its artificial intelligence chatbot, Grok, and lifted the access restriction imposed on that date. The action followed an order to ensure a safe digital space for Filipino users. An inter-agency technical assessment, led by the Cybercrime Investigation and Coordinating Center (CICC) and the Nationa...

Official materialContent ModerationOfficial source · dict.gov.ph ↗

02 NOV 2025 · International Agreement

Turkey and Philippines Memorandum of Understanding to enhance data protection cooperation

On 11 February 2025, the Turkish Data Protection Authority (KVKK) and the National Privacy Commission (NPC) of the Philippines signed a memorandum of understanding (MoU) to enhance cooperation in data protection and explore joint initiatives on personal data privacy. The MoU establishes a framework for collaboration and promoting the exchange of good practices between the respective institutions.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

13 OCT 2025 · Law / Act

National Privacy Commission's statement on nature of registration and its jurisdiction under Data Privacy Act 2012

On 13 October 2025, the National Privacy Commission (NPC) issued a statement reaffirming its role as the Philippines’ independent data protection authority under the Data Privacy Act of 2012. The statement clarified that registration with the Commission does not imply approval or confirmation of lawful data processing. It stressed that organisations remain responsible for compliance and safeguarding personal data. The NPC also stressed its exclusive authority to determine the legality of data...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

23 SEP 2025 · Other

National Privacy Commission investigation into Tools for Humanity over alleged data privacy violations

On 23 September 2025, the National Privacy Commission (NPC) issued a cease-and-desist order (CDO) against Tools for Humanity (TFH), the entity operating the World App and Orb verification system. The order prohibits making the World App available, conducting Orb device verification, and transferring or sharing any previously collected personal data. TFH is also required to submit the total number of Filipino registrants and its operating locations. The NPC found that TFH's data processing pra...

Official materialNational StrategyOfficial source · privacy.gov.ph ↗

27 AUG 2025 · Executive Order

National Privacy Commission Advisory on privacy engineering in systems life cycle processes (No. 2025-02)

On 27 August 2025, the Philippines' National Privacy Commission adopted an Advisory establishing guidelines on privacy engineering in systems life cycle processes. The Advisory applies to all personal information controllers and personal information processors engaged in processing personal data through data processing systems. The Advisory emphasises privacy-by-design and privacy-by-default implementation across five system development stages, including planning and requirements gathering, d...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

09 AUG 2025 · Law / Act

Data protection regulation in Open Access in Data Transmission Act (Act No. 12234)

On 8 September 2025, the Open Access in Data Transmission Act, including data protection regulation, enters into force. The Act embeds data protection by requiring providers to safeguard the confidentiality, integrity, and security of transmitted information. It also mandates full compliance with the Data Privacy Act and related cybersecurity laws under the oversight of the National Privacy Commission. It guarantees end users' rights to privacy and non-discriminatory access, prohibits unlawfu...

Primary legal sourceNational StrategyOfficial source · officialgazette.gov.ph ↗

02 JUL 2025 · Law / Act

Content moderation authority governance in Bill regulating the use of Social Media Platforms by Minors

On 2 July 2025, Bill Regulating the Use of Social Media Platforms by Minors (Bill No. 40), content moderation authority governance, was introduced to the Senate. The Bill establishes age restrictions for social media use, prohibiting individuals under 18 from accessing such platforms. It requires providers to implement age verification measures, including options such as ID checks or facial recognition. The Department of Information and Communications Technology (DICT) is tasked with overseei...

Primary legal sourceContent ModerationOfficial source · senate.gov.ph ↗

02 JUL 2025 · Law / Act

Authorisation of goods or services requirement in Artificial Intelligence Regulation Act (AIRA/SBN-25)

On 2 July 2025, the Artificial Intelligence Regulation Act (AIRA/SBN-25), which includes an authorisation requirement, was introduced to the Senate. AIRA creates a regulatory regime for the development and use of AI, including artificial general intelligence (AGI), artificial superintelligence (ASI), and AI foundation models, and applies to all AI developers and deployers in the Philippines. AIRA would give the National AI Commission (NAIC) the responsibility to certify and monitor AI-related...

Primary legal sourceNational StrategyOfficial source · web.senate.gov.ph ↗

27 JUN 2025 · Standard / Framework

National Privacy Commission guidelines on accountability of influencers and content creators

On 27 June 2025, the National Privacy Commission (NPC) closes its consultation on the guidelines on accountability of influencers and content creators. The consultation sought input from stakeholders on the processing of personal data by influencers and content creators, including the types of personal data processed, legal basis for processing, consent and transparency mechanisms, specific risks, challenges encountered, requests for deletion, existing safeguards, awareness of the Data Privac...

Official materialNational StrategyOfficial source · privacy.gov.ph ↗

30 MAY 2025 · Standard / Framework

National Privacy Commission guidelines on biometric data

On 30 May 2025, the National Privacy Commission (NPC) closes its consultation on the implementation of international data protection standards in the country. The initiative is part of the development of regulations under the Data Privacy Act of 2012, with a specific focus on the drafting of guidelines on biometric data. Stakeholders and the public are invited to provide information on use cases related to biometric data, including physical, physiological, or behavioural characteristics for u...

Official materialNational StrategyOfficial source · privacy.gov.ph ↗

27 MAR 2025 · Working Paper

Competition Commission and National Privacy Commission inquiry into competition and data privacy approaches among platform intermediaries and search services

On 19 March 2025, the Philippine Competition Commission (PCC) and the National Privacy Commission (NPC) announced an inquiry examining the intersection of data privacy and competition policy among social media and search platforms. The inquiry focuses on the market power of large technology firms, including Meta and Google. The inquiry highlighted concerns including consumer choice in data collection, the role of data portability and interoperability in fostering competition, and challenges p...

Official materialCompetitionOfficial source · phcc.gov.ph ↗

07 MAR 2025 · Policy / Guidance

Department of Trade and Industry engagement with Meta's Consumer Policy Channel for e-commerce oversight

On 7 March 2025, the Philippine Department of Trade and Industry (DTI), through its Fair Trade Enforcement Bureau and E-Commerce Bureau, met with Meta to initiate the onboarding process to Meta's Consumer Policy Channel (CPC). The CPC is a system provided by Meta that enables regulatory agencies to track transactions on Facebook, submit reports of potential violations, and request content takedowns using a combination of user reports, automated detection, and human review. The CPC is applicab...

Official materialContent ModerationOfficial source · dti.gov.ph ↗

07 FEB 2025 · Law / Act

Data protection regulation in Artificial Intelligence Regulation Act (AIRA/SBN-25)

On 2 July 2025, the Artificial Intelligence Regulation Act (AIRA/SBN-25), which includes data protection regulation, was introduced to the Senate. AIRA creates a regulatory regime for the development and use of AI, including artificial general intelligence (AGI), artificial superintelligence (ASI), and AI foundation models, and applies to all AI developers and deployers in the Philippines. Under AIRA, one of the conditions for mandatory registration of AI systems under section 12 would be the...

Primary legal sourceNational StrategyOfficial source · web.senate.gov.ph ↗

19 DEC 2024 · Standard / Framework

NPC guidelines on AI Systems and Data Privacy Act of 2012

On 19 December 2024, the National Privacy Commission (NPC) issued guidelines for applying the Data Privacy Act of 2012 (DPA) to processing personal data in AI system development or deployment. The guidelines support compliance with the Act, covering privacy principles and ethical considerations. The guideline's provisions include supporting data subjects' rights, conducting Privacy Impact Assessments (PIA), adopting privacy-by-design principles, limiting biases in AI systems, data minimisatio...

Official materialNational StrategyOfficial source · privacy.gov.ph ↗

17 DEC 2024 · Standard / Framework

NPC Guidelines on Child-Oriented Transparency (No. 2024 - 03)

On 17 December 2024, the National Privacy Commission (NPC) of the Philippines adopted the Guidelines on Child-Oriented Transparency (No. 2024-03). These guidelines apply to all Personal Information Controllers (PICs) and Personal Information Processors (PIPs) engaged in the processing of children’s personal data across various sectors. The guidelines mandate the incorporation of Child Privacy Impact Assessments (CPIAs) into Privacy Impact Assessments (PIAs), the implementation of age assuranc...

Official materialNational StrategyOfficial source · privacy.gov.ph ↗

26 NOV 2024 · International Agreement

Philippines-Republic of Korea Memorandum of Understanding on Cooperation in Data Protection

On 26 November 2024, the Korean Personal Information Protection Commission and the National Privacy Commission of the Philippines signed a Memorandum of Understanding for collaboration on personal data protection. Key areas of collaboration include conducting joint investigations on personal data breaches, developing trusted data transfer mechanisms to support cross-border data flows, and improving interoperability between data protection systems.

Primary legal sourceNational StrategyOfficial source · pipc.go.kr ↗

26 NOV 2024 · International Agreement

PIPC-NPC MoU on enhancing cooperation in personal data protection

On 26 November 2024, the Personal Information Protection Commission (PIPC) of South Korea and the National Privacy Commission (NPC) of the Philippines signed a Memorandum of Understanding (MoU) to enhance cooperation in personal data protection. The MoU aims to support secure cross-border data flows, foster joint investigations, and promote the development of compatible data protection mechanisms. Additionally, the agreement focuses on knowledge sharing, training, and educational initiatives ...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

06 NOV 2024 · Executive Order

NPC guidelines on child-oriented transparency to protect children's personal data in accordance with the Data Privacy Act (DPA)

On 6 November 2024, the Philippine National Privacy Commission (NPC) closes the consultation on guidelines on child-oriented transparency to protect children's personal data in accordance with the Data Privacy Act (DPA) of 2012. The guidelines outline the responsibilities of Personal Information Controllers (PICs) when processing children's data, ensuring that appropriate security measures are in place to safeguard the best interests and evolving capacities of children. The scope of the guide...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

18 OCT 2024 · Law / Act

VAT on digital services in Bill Amending and Adding New Sections of the National Internal Revenue Code (SB No. 2528)

On 18 October 2024, the Bill Amending and Adding New Sections of the National Internal Revenue Code, including 12% VAT on digital services (SB No. 2528), enters into force. The Bill mandates nonresident digital services providers (DSP) to register for and collect a 12% value-added tax (VAT) on digital services consumed in the country. The digital services include online search engines, marketplaces, cloud services, media and advertising, platforms, and digital goods. Under the Bill, certain s...

Primary legal sourceNational StrategyOfficial source · legacy.senate.gov.ph ↗

26 SEP 2024 · Executive Order

COMELEC guidelines on the use of social media, artificial intelligence and internet technology for the 2025 elections and the BARMM parliamentary elections

On 26 September 2024, the Commission on Election's resolution No. 11064, establishing regulations for the use of artificial intelligence (AI) and social media in digital campaigns for the 2025 national, local, and BARMM parliamentary elections, enters into force. The resolution mandates candidates and political parties to register all digital campaign platforms by 13 December 2024, ensuring compliance with transparency requirements, including disclosing AI usage in campaign materials. The res...

Primary legal sourceContent ModerationOfficial source · comelec.gov.ph ↗

18 SEP 2024 · Law / Act

Artificial Intelligence Act (HB 10944)

On 18 September 2024, the Artificial Intelligence Act (HB 10944) was introduced into the Philippine House of Representatives. The Act would create the Philippine Artificial Intelligence Board (PAIB) and task it with ensuring the development, research, application and use of AI systems, ensure compliance with the Act and, in case of non-compliance, impose and collect fines and penalties, conduct investigations. Furthermore, the Act would require the PAIB to maintain a central database of AI co...

Primary legal sourceNational StrategyOfficial source · docs.congress.hrep.online ↗

12 AUG 2024 · Executive Order

NPC Advisory Opinion on Personal Data Processing under Section 13 (f) of the Data Privacy Act of 2012

On 12 August 2024, the National Privacy Commission (NPC) of the Philippines adopted an advisory opinion on personal data processing based on Section 13 (f) of the Data Privacy Act of 2012. The advisory aims to clarify the lawful basis for processing personal data by personal information controllers (PICs), particularly in relation to the functions of public authorities. It establishes the conditions under which personal data processing is considered necessary, including for the protection of ...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

12 AUG 2024 · Standard / Framework

Guidelines on personal data processing under Section 13(f) of the Data Privacy Act of 2012 clarifying the basis for processing personal data

On 12 August 2024, the National Privacy Commission of the Philippines adopted guidelines clarifying the application of Section 13(f) of the Data Privacy Act of 2012 as the basis for processing personal data. The section allows the processing of sensitive personal and privileged information when necessary for the protection of lawful rights and interests in court proceedings, or for the establishment, exercise, or defence of legal claims, or when provided to government or public authority. The...

Official materialNational StrategyOfficial source · privacy.gov.ph ↗

12 JUL 2024 · Policy / Guidance

BSP advisory against fraudulent social media content

On 12 July 2024, the Central Bank of the Philippines (BSP) issued an advisory on the proliferation of scams utilising artificial intelligence to fabricate convincing fake videos and audio aimed at spreading misinformation about the BSP and its officials. The BSP clarified that it does not endorse any cryptocurrency projects, including the Tesler Code, and urged the public to exercise caution, avoid disclosing personal information to unverified sources, verify communications from BSP represent...

Official materialConsumer ProtectionOfficial source · bsp.gov.ph ↗

03 JUL 2024 · Executive Order

DTI Center for AI Research

On 3 July 2024, the Philippine Department of Trade and Industry (DTI) adopted an order establishing the Center for AI Research (CAIR). CAIR aims to use the potential of AI to address societal and industrial changes, further economic growth, and promote inclusive development. Specifically, CAIR intends to create AI solutions for regional concerns specific to the Philippines, such as in the areas of healthcare and agriculture, thereby establishing the country as a leader in multiple AI applicat...

Primary legal sourceNational StrategyOfficial source · dti.gov.ph ↗

05 JUN 2024 · Policy / Guidance

NPC notice to businesses processing personal data without registering

On 5 June 2024, the National Privacy Commission (NPC) issued a warning to businesses processing personal data without registering with the NPC. Non-compliance with the Data Privacy Act of 2012 (DPA) and related NPC orders will result in show-cause orders. NPC Circular No. 2022-04 mandates the registration of data processing systems and data protection officers for businesses processing personal data of 250 or more employees, 1’000 or more customers, or data posing significant risks to data su...

Official materialNational StrategyOfficial source · privacy.gov.ph ↗

30 MAY 2024 · Policy / Guidance

NPC advisory on model contractual clauses for cross-border transfers of personal data

On 30 May 2024, the Philippine National Privacy Commission (NPC) issued an advisory on model contractual clauses (MCCs) for cross-border transfers of personal data. The advisory aligns with the Data Privacy Act of 2012 (DPA), which protects privacy rights while ensuring the free flow of information to promote growth and innovation. The NPC is part of the Global Privacy Assembly (GPA) and its Global Frameworks and Standards Working Group (GFSWG), which published a comparative guide on MCCs fro...

Official materialNational StrategyOfficial source · privacy.gov.ph ↗

27 MAY 2024 · Executive Order

National Privacy Commission Guidelines on Consent (Circular No. 2023-04)

On 27 May 2024, the obligations under the National Privacy Commission (NPC)’s guidelines on consent (circular No. 2023-04) enter into force. The guidelines outline the rules personal information controllers (PICs) are required to follow when collecting and processing personal data based on an individual’s consent. The guideline specifies what constitutes valid consent and how it shall be obtained and managed in compliance with the Implementing Rules and Regulations of the Data Privacy Act. In...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

23 MAY 2024 · Law / Act

Foreign Adversary Controlled Applications Regulation Act (HB No. 10489)

On 23 May 2024, the Foreign Adversary Controlled Applications Regulation Act (HB No. 10489) was introduced in the House of Representatives of the Philippines. The Act would prohibit the operation of foreign adversary-controlled applications within the Philippines, targeting entities that distribute, maintain, or update such applications through app stores or internet hosting services. Companies fall under the Act if they permit users to create an account to share and view text, images and vid...

Primary legal sourceContent ModerationOfficial source · docs.congress.hrep.online ↗

13 MAY 2024 · Law / Act

AI Regulation Act (HB 10385)

On 13 May 2024, the Al Regulation Act (HB 10385) was introduced into the Philippine House of Representatives. The Act would establish the Artificial Intelligence Bureau with the goal of ensuring technical development while ensuring workers’ rights and preventing job displacement through AI. The Bureau would be tasked with developing a national AI development and regulation strategy, ensuring research and development, introducing rules and regulations to prevent displacement in the job due to ...

Primary legal sourceNational StrategyOfficial source · docs.congress.hrep.online ↗

04 MAY 2024 · International Agreement

Philippines-United Arab Emirates Memorandum of Understanding on personal data security and protection

On 5 April 2024, the Philippine National Privacy Commission (NPC) and the Dubai International Financial Centre (DIFC) signed a Memorandum of Understanding (MoU) to enhance their cooperation in data privacy and security. The MoU aims to strengthen the partnership between the two countries facing challenges and opportunities presented by digitalisation in both the public and private sectors. The MoU outlines commitments to assist in the enforcement of data protection laws, conducting joint inve...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

18 APR 2024 · Standard / Framework

DICT memorandum on the principles and guidelines for the ethical and trustworthy use of AI in the government

On 18 April 2024, the Department of Information And Communications Technology of the Philippines published a draft memorandum on the principles and guidelines for the ethical and trustworthy use of Artificial Intelligence (AI) in the government. The principles apply to the executive branch, government-owned and controlled corporations, and local government units and encourage other branches to adopt the principles to foster ethical AI usage in the Philippines. The principles aim to ensure the...

Official materialNational StrategyOfficial source · dict.gov.ph ↗

13 APR 2024 · Executive Order

NPC Guideline on legitimate interest (NPC Circular No. 2023 - 07)

On 13 April 2024, the National Privacy Commission (NPC) guidelines on legitimate interest entered into force. The guidelines apply to controllers and third parties that process or are involved in the processing of personal data on the lawful basis of the legitimate interest. Processing based on legitimate interest necessitates meeting specific criteria, such as establishing a genuine interest, ensuring the necessity and lawfulness of the chosen means, and ensuring legitimacy without violating...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

30 MAR 2024 · Executive Order

National Privacy Commission (NPC) Circular 2023-06 on Security of Personal Data in the Government and Private Sector

On 30 March 2024, the National Privacy Commission (NPC) Circular 2023-06 Security of Personal Data in the Government and Private Sector entered into force. The Circular provides updated requirements for the security of personal data processed by personal information controllers (PICs) or personal information processors (PIPs). The requirements include the designation and registration of a data protection officer, the registration of data processing systems, conducting privacy impact assessmen...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

29 MAR 2024 · Executive Order

National Privacy Commission guidelines on the issuance of identification (ID) cards to data subjects (NPC Circular No. 2023-03)

On 29 March 2024, the National Privacy Commission (NPC)'s guidelines on the issuance of identification (ID) cards to data subjects (NPC Circular No. 2023-03) entered into force. The guidelines apply to all personal information controllers (PICs) in the private sector issuing ID cards to their respective data subjects. The guidelines provide information on the processing of personal data when issuing ID cards, specifying that it should be compliant with the proportionality principle. In partic...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

15 MAR 2024 · Executive Order

NPC Circular 2023-05 or the Prerequisites for the Philippine Privacy Mark Certification Program

On 15 March 2024, the National Privacy Commission (NPC) Circular 2023-05 on prerequisites for obtaining the Philippine privacy mark certification for organisations and certification bodies entered into force. The circular is addressed to personal information controllers (PICs), personal information processors (PIPs), and the accreditation of Certification Bodies (CBs) under the PPM Certification Program. A PIC or PIP must be certified with ISO/IEC 27001 (Information Security Management System...

Primary legal sourceNational StrategyOfficial source · privacy.gov.ph ↗

12 MAR 2024 · Law / Act

Act Prohibiting Online Publication and Promotion of Gambling Related Content Providing Penalties Therefor and for Other Purposes (SB No. 2602)

On 12 March 2024, the Act Prohibiting Online Publication and Promotion of Gambling-Related Content Providing Penalties Therefor and for Other Purposes (SB No. 2602) was introduced in the Senate of the Philippines. The Act would prohibit natural and juridical persons from distributing or advertising gambling-related content online. In the event of a violation, the Department of Justice (DOJ) would be authorised to issue a disabling order to restrict or block access to such content. Additionall...

Primary legal sourceContent ModerationOfficial source · legacy.senate.gov.ph ↗