Does the Philippines require a Data Protection Officer?

Yes. The NPC requires personal information controllers and processors to appoint a Data Protection Officer and, for many, to register their data processing systems.

Asia-Pasifik

Persetujuan kuki di Pilipinas

Q: How must consent be evidenced in the Philippines?

Consent must be freely given, specific, and informed, and should be evidenced by written, electronic, or recorded means, so organisations need to keep records of how consent was obtained.

Persetujuan dan undang-undang privasi di Pilipinas

The Philippines Data Privacy Act of 2012, enforced by the NPC, is modelled partly on the GDPR and partly on APEC principles. Consent must be freely given, specific, and informed, and it should be evidenced by written, electronic, or recorded means, a fairly strict documentation requirement. The NPC requires many organisations to register their data processing systems and to appoint a Data Protection Officer. The law carries both fines and imprisonment, and the NPC has issued administrative fine guidelines tied to a percentage of annual gross income. Notices in English and Filipino are common. Cookies and online identifiers are personal information needing a lawful basis.

Pihak berkuasa

National Privacy Commission (NPC)

Status

Data Privacy Act of 2012, in force with implementing rules from 2016

Undang-undang utama

DPA

Bahasa

English, Filipino

Siapa yang wajib mematuhi

Personal Information Controllers and Personal Information Processors that process personal information in the Philippines, including private-sector organisations, government agencies within the Act's scope, and certain entities outside the Philippines under the Act's extraterritorial provisions.

Penalti

Fines and imprisonment, with the NPC issuing administrative fine guidelines

Kewajipan utama

Determine the applicable lawful processing criterion for each activity
Provide privacy notices covering purposes, recipients, retention and rights
Obtain freely given, specific and informed consent where consent is relied upon
Honour access, correction, objection, erasure or blocking and portability rights
Appoint a Data Protection Officer and register data processing systems where required
Implement reasonable and appropriate organisational, physical and technical security measures
Notify the NPC and affected data subjects within 72 hours where mandatory-notification conditions are met

Panduan tempatan

Appoint a Data Protection Officer and register where required
Evidence consent in written, electronic, or recorded form
Provide notices in English and Filipino
Follow NPC administrative fine guidelines

Bagaimana ConsentX membantu

Cookie and tracker discovery scans
Configurable consent capture where consent is the legal basis
Prior-script blocking before the applicable consent decision
Consent records and evidence for audits
Region rule engine tuned for the Philippines

Mula secara percuma

yoursite.com

Pilipinas

Kami menghargai privasi anda

Kami meminta persetujuan anda sebelum sebarang kuki bukan penting, mengikut peraturan yang terpakai di wilayah anda.

Benarkan semuaTolak yang bukan pentingUrus keutamaan

Persetujuan direkodkan

sha256 · chain ok

Halaman ini diterjemah secara mesin dan mungkin mengandungi kesilapan. Sila semak butiran undang-undang dengan penasihat guaman tempatan yang berkelayakan sebelum bergantung padanya.

Sediakan Pilipinas dengan ConsentX

Sepanduk mengikut wilayah, sekatan skrip awal, DSAR dan bukti kalis usik.

Mula secara percuma Tempah demo

Cara mematuhi Pilipinas dengan ConsentX

1
Imbas laman web anda
Jalankan imbasan percuma untuk mencari setiap kuki dan penjejak di laman anda, supaya anda tahu dengan tepat apa yang memerlukan persetujuan di bawah Pilipinas.
2
Paparkan sepanduk persetujuan mengikut wilayah
Tambah sepanduk ConsentX. Ia mengesan wilayah setiap pelawat dan memaparkan secara automatik pengalaman persetujuan yang dikehendaki Pilipinas.
3
Sekat penjejak sehingga ada persetujuan
Kekalkan kuki dan penjejak bukan penting dalam keadaan disekat sehingga pelawat bersetuju, supaya tiada apa-apa berjalan sebelum persetujuan.
4
Rekod bukti kalis usik
Setiap pilihan disimpan sebagai resit persetujuan kalis usik yang boleh anda kemukakan dalam audit Pilipinas.
5
Uruskan permintaan data tepat pada masanya
Gunakan aliran kerja DSAR terbina dengan pemasa SLA untuk menjawab permintaan akses, pemadaman dan penarikan diri dalam tempoh yang ditetapkan undang-undang.