Data Privacy Act of 2012 (Philippines)

The Data Privacy Act of 2012 (Republic Act No. 10173) is the Philippines’ comprehensive data protection law governing the collection, processing, storage, use, disclosure, and protection of personal information by public and private entities. The Act establishes privacy principles, regulates personal data processing activities, grants individuals rights over their personal information, imposes obligations on personal information controllers and processors, and creates the National Privacy Commission (NPC) as the regulatory authority. The law provides a framework for data security, accountability, consent, and cross-border data transfers.