September 2024 1. Governing Texts The Data Privacy Act of 2012 (Republic Act No. 10173) (Act) was the first comprehensive law covering data privacy in the Philippines. It became enforceable on September 8, 2012. The National Privacy Commission (NPC), which was established in early 2016, later issued the Implementing Rules and Regulations of Republic Act No. 10173 (IRR), which became enforceable on September 9, 2016. The IRR provides, in greater detail, the requirements that individuals and entities must comply with when processing personal data, as well as the sanctions for violations of the Act. 1.1. Key acts, regulations, directives, bills As the primary legislation on data protection in