Philippines - Consultation on new implementation rules and regulations for 2012 Privacy Act
Published 20 June 2016
On 20 June 2016, the Philippines’ National Privacy Commission (“NPC”) released, for public consultation, the proposed implementation rules and regulations (the “IRR”) for its Data Privacy Act 2012 (the “Privacy Act”).
The IRR will reinforce the Privacy Act and will be a means of adopting generally accepted data protection international principles and standards. The IRR is intended to create a more secure environment for businesses and to strengthen the Philippines’ position as a global hub of business outsourcing. The IRR specifically addresses the NPC’s role and the retention periods of personal data, implements principles governing privacy, asserts the rights of data subjects and sets out breach notification procedures.
Once the public consultation on the IRR has completed, there is due to be another public consultation commencing 13 July 2016. The NPC will then finalise the IRR, following which they will be published in at least two national papers and will come into effect 15 days thereafter.
Many organisations host their back office functions in the Philippines and such organisations should monitor the outcomes of the public consultations and further developments. They may also wish to consider responding to the consultations on the IRR.
The text of the IRR as it appears on the Philippines Government's Official Gazette can be accessed here.