Act 2012
Republic Act No. 10173, Data Privacy Act of 2012
Issued by National Privacy Commission
Plain-English summary
Governs the processing of personal information. It sets the lawful criteria for processing (section 12), data subject rights (section 16), security measures (section 20) and breach notification (section 20(f)), and creates the National Privacy Commission (section 7). Approved 15 August 2012; the Implementing Rules and Regulations are published alongside it by the NPC.
Who it applies to
All industries
Topics
Data Protection & Privacy
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Lawful basis for processing, privacy notice and data subject rights | Ongoing | NPC | official | |
Section 12 permits processing of personal information only if not otherwise prohibited by law and at least one listed condition applies, such as consent, contract, legal obligation or legitimate interests. Section 16 gives data subjects rights to be informed, to access, to dispute inaccuracies, to suspend, withdraw, block or order removal of data, and to be indemnified for damages. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.