AI Liability in the Philippines: Who Is Liable When AI Causes Harm?

The Philippines has no single statute that says who pays when artificial intelligence causes harm. Liability is instead traced through existing law to the person behind the AI — the developer, the business deploying it, or the user — because only persons, not software, can be liable. If the harm arises from fault or negligence, Article 2176 of the Civil Code obliges whoever caused the damage by act or omission to pay for it. If a contract governs the relationship, Article 1159 treats that contract as law between the parties. If a defective consumer product or service is involved, the Consumer Act of the Philippines applies, and Article 3 directs that the best interest of the consumer be considered in its interpretation.

Why the AI itself cannot be sued

Philippine law treats obligations as juridical necessities that bind persons. Under Article 1156 of the Civil Code, an obligation is a juridical necessity to give, to do, or not to do — a description that presupposes a person capable of being bound. A model, chatbot, or automated system cannot be a defendant.

This means every AI-related claim must identify a natural or juridical person whose act or omission produced the harm. The practical question is never "what did the AI do?" but "whose conduct, decision, or omission does the law attach to this damage?"

Negligence and fault: the default rule

Article 2176 of the Civil Code provides that whoever, by act or omission, causes damage to another, there being fault or negligence, is obliged to pay for the damage done. This is the backbone of most AI harm claims in the absence of a contract.

The provision does not exempt harm caused through software. If a business deploys an automated system and fails to exercise due care — for example, by relying on outputs without reasonable verification, or by failing to maintain or monitor the system — that failure can be characterized as fault or negligence attributable to the business.

The Civil Code also limits recovery to harm that is a natural and probable consequence of the act or omission complained of, in cases where exemplary damages are not available. In plain terms, liability extends to harm that is a foreseeable result of the conduct, not to every remote consequence.

Contract-based liability

Where the parties are bound by an agreement — a software license, a service contract, or terms of use — Article 1159 provides that obligations arising from contracts have the force of law between the contracting parties and should be complied with in good faith.

The Civil Code also allows the parties to establish such stipulations, clauses, terms, and conditions as they may deem convenient, provided they are not contrary to law, morals, good customs, public order, or public policy. This is where limitation-of-liability and warranty clauses in AI contracts matter: they are generally respected, but they cannot be used to defeat mandatory protections or public policy.

Consumer protection when AI is part of a product or service

The Consumer Act of the Philippines (Republic Act No. 7394) protects consumers of goods, services, and credit. Its Article 2 declares the State policy to protect consumer interests, including protection against hazards to health and safety and against deceptive, unfair, and unconscionable sales acts and practices, and to provide adequate rights and means of redress.

Article 3 is significant for AI disputes: the best interest of the consumer shall be considered in the interpretation and implementation of the Act. Where an AI feature is embedded in a consumer product or service, the supplier cannot rely on technical complexity to escape the Act's policy orientation.

Human relations standards and good faith

Article 19 of the Civil Code requires every person, in the exercise of rights and the performance of duties, to act with justice, give everyone their due, and observe honesty and good faith. Article 20 makes a person who, contrary to law, willfully or negligently causes damage to another liable to indemnify the latter. Article 21 covers willful causes of loss or injury done in a manner contrary to morals, good customs, or public policy.

These provisions matter in AI contexts where no single negligent act is obvious — for instance, where a system's design choices, data practices, or deployment decisions cumulatively disadvantage a person.

Data privacy obligations

Where AI processes personal data, the Data Privacy Act of 2012 and its Implementing Rules and Regulations apply. The Rules define profiling as any form of automated processing of personal data used to evaluate personal aspects of a natural person — including performance at work, economic situation, health, preferences, reliability, behavior, location, or movements.

The Rules also define a personal information controller as the person or body who controls the processing of personal data or instructs another to process it on its behalf, and a personal information processor as one to whom processing is outsourced or instructed. This distinction is central to AI liability: the controller typically bears the compliance obligation, while the processor acts on instructions. The Rules likewise provide that persons may be held accountable for violations of the Act and the Rules.

Frequently asked questions

Can I sue an AI system in the Philippines? No. Only natural or juridical persons can be parties to a case. A claim must be brought against the developer, the business using the AI, or another person whose act or omission caused the harm.

Who is liable if a company's AI damages a customer? It depends on the source of the obligation. If the harm arose from fault or negligence, Article 2176 of the Civil Code applies. If a contract governs, Article 1159 applies. If a consumer product or service is involved, the Consumer Act of the Philippines applies.

Does the Data Privacy Act cover AI that processes personal data? Yes. The Data Privacy Act of 2012 and its IRR apply to processing of personal data, including automated processing such as profiling, as defined in the Rules.

Practical takeaways

• Only persons — not AI systems — can be held liable under Philippine law; identify the human or corporate actor behind the harm.
• Article 2176 of the Civil Code is the default basis for claims grounded in fault or negligence.
• Contract terms govern where they exist, but they cannot violate law, morals, good customs, public order, or public policy.
• The Consumer Act of the Philippines applies to consumer products and services, and Article 3 requires interpretation in the consumer's best interest.
• Where personal data is processed, the Data Privacy Act of 2012 and its IRR impose separate obligations, with accountability attaching to controllers and processors.

Primary sources

The rules discussed above are drawn from the following primary sources, as published in the Official Gazette and the national statute book.

• REPUBLIC ACT NO. 7394 - THE CONSUMER ACT OF THE PHILIPPINES

• NPC IRR OF REPUBLIC ACT NO. 10173, August 24, 2016

• Civil Code of the Philippines (R.A. No. 386, CIVIL CODE)

This article is general information and not legal advice. For your specific situation, consult a lawyer or ask ASG Legal AI.