What are the key data privacy laws and regulations?
Last review date: 31 December 2025
- Data Privacy Act
- Implementing Rules and Regulations of the Data Privacy Act
- National Privacy Commission Circulars
- National Privacy Commission Advisories
- Decisions of the NPC, Supreme Court, Court of Appeals, and other government bodies
What are the key cybersecurity laws and regulations?
Last review date: 31 December 2025
- Anti-Financial Account Scamming Act (AFASA)
- Internet Transactions Act
- Implementing Rules and Regulations of the Internet Transactions Act
- Implementing Rules and Regulations of the Expanded Anti-Trafficking in Persons Act
- Cybercrime Prevention Act
- Implementing Rules and Regulations of the Cybercrime Prevention Act
- Rule on Cybercrime Warrants
- Budapest Convention on Cybercrime
- Electronic Commerce Act
- Implementing Rules and Regulations of the Electronic Commerce Act
- Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act
- Access Devices Regulation Act
- Anti-Photo and Video Voyeurism Act
- Subscriber Identity Module (SIM) Registration Act
- Mobile Number Portability Act
- Philippine Central Bank Circular No. 1213, series of 2025 on Amendments to Regulations on Information Technology Risk Management to Implement Section 6 of AFASA
- Philippine Central Bank Circular No. 1214, series of 2025 on Rules of Procedure on the Conduct of Inquiry into Financial Accounts and Sharing of Financial Account Information by BSP Pursuant to AFASA
- Philippine Central Bank Circular No. 1215, series of 2025 on Regulations on the Temporary Holding of Funds Subject of Disputed Transactions and Coordinated Verification Process
- Philippine Central Bank Circular No. 1019, series of 2018 on Technology and Cyber-Risk Reporting and Notification Requirements
- Philippine Central Bank Circular No. 982, series of 2017 on Enhanced Guidelines on Information Security Management
- Philippine Central Bank Circular No. 808, series of 2013 on Guidelines on Information Technology Risk Management for All Banks And Other BSP Supervised Institutions
- Philippine Department of Information and Communications Technology (DICT) Department Circular HRA-003, series of 2025 on Prescribing International Organization for Standardization (ISO) Standards on Information Security for Entities Engaged in the Telecommunications Business
- DICT Circular HRA-001, series of 2025 on Adoption of a Standards-Based Approach to Information Systems Strategic Plan (ISSP) Compliance
- DICT Department Circular No. 006, series of 2024 on Guidelines for the Vulnerability Disclosure Initiative
- DICT Department Circular No. 005, series of 2024 on Reporting Mechanisms and Mandatory Disclosure of Cybersecurity Incidents for the Government
- DICT Department Circular No. 004, series of 2024 on Prescribing the Adoption of a Layered Security and Defense Approach to Digital Information Security Measures Relevant to Cybersecurity for Government Agencies
- DICT Memorandum Circular No. 005 on Prescribing the Policies, Rules and Regulations on the Protection of Critical Infrastructure (CII) Stipulated in the National Cybersecurity Plan (NCSP) 2022
- DICT Memorandum Circular No. 006 on Prescribing the Policies, Rules and Regulations on the Protection of Government Agencies Stipulated in the National Cybersecurity Plan (NCSP) 2022
- DICT Memorandum Circular No. 007 on Prescribing the Policies, Rules and Regulations on the Protection of Individuals Stipulated in the National Cybersecurity Plan (NCSP) 2022
- DICT Department Circular No. 2017-002 on Prescribing the Philippine Government's Cloud First Policy (as amended)
What are the key laws and regulations relating to non-personal data?
Last review date: 31 December 2025
- Revised Penal Code
- Civil Code of the Philippines
- Intellectual Property Code
- Philippine Competition Act
- Implementing Rules and Regulations of the Philippine Competition Act
- Cybercrime Prevention Act
- Implementing Rules and Regulations of the Cybercrime Prevention Act
- Electronic Commerce Act
- Implementing Rules and Regulations of the Electronic Commerce Act
- Commission on Elections Resolution No. 11064 on Guidelines on the Use of Social Media, Artificial Intelligence, and Internet Technology, for Digital Election Campaign, and the Prohibition and Punishment of its Misuse for Disinformation, and Misinformation, in Connection with the 2025 National and Local Elections and the BARMM Parliamentary Elections
- NTC Memorandum Circular No. 02-05-2008 on Value Added Services
- NTC Memorandum Circular No. 03-03-2005-A on Broadcast Messaging
- FDA Administrative Order No. 2020-0010 on Regulations on the Conduct of Clinical Trials for Investigational Products
- FDA Circular No. 2020-03 on Guidelines for Pharmaceutical Industry for Pharmacovigilance
- Konektadong Pinoy Act
- Implementing Rules and Regulations of the Konektadong Pinoy Act