DATA PRIVACY

Republic Act No. 10173 or the Data Privacy Law was enacted in 2012 with the intention of protecting personal information (including sensitive personal information) of Filipinos. The Privacy Commissioner will first have to be appointed before the Implementing Rules and Regulations (IRR) can be issued. The self-executing provisions of the law, however, are now in effect.

While waiting for the establishment of the National Privacy Commission, the private sector is urging the DTI, given its mandate under the E-Commerce Law, to update the data privacy guidelines issued in 2006 to align it with the Data Privacy Law. It is important for citizens and businesses to have an avenue for complaints to be filed in violation of the Data Privacy Law.