DPA
Data Privacy Act of 2012
Philippines
In force since 2012
Asia & Africa
Who must comply
Personal information controllers and processors that process personal data of individuals in the Philippines, including some processing carried out abroad.
Penalties
Fines up to PHP 5 million and imprisonment depending on the offense, with separate penalties per violation.
Key obligations
- Obtain freely given, specific and informed consent where required
- Provide notice of purpose and rights before collection
- Honor access, correction, erasure and objection rights
- Register data processing systems and appoint a data protection officer
- Notify breaches to the commission and affected individuals
How ConsentX helps
Freely given, specific opt-in consent capture
Purpose and rights notice in the banner
Rights request workflow with evidence
Consent receipts for audit
Region rule engine tuned for the Philippines
Get DPA ready with ConsentX
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with DPA using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under DPA.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that DPA requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a DPA audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
Does the Philippines require consent for processing?+
Consent is a common lawful basis and must be freely given, specific and informed, with stricter handling for sensitive information.
Who enforces the Data Privacy Act?+
The National Privacy Commission, the NPC, administers and enforces the law.