Data Center Legal Requirements in the Philippines: The Complete Checklist

Data centers in the Philippines are regulated under several overlapping regimes rather than a single "data center law." A data center operator generally needs: (1) a corporation registered with the Securities and Exchange Commission (SEC) under the Revised Corporation Code; (2) a franchise from Congress or a Certificate of Public Convenience and Necessity (CPCN) from the National Telecommunications Commission (NTC) if it provides telecommunications services to the public for compensation; (3) business permits and clearances from the local government unit (LGU), including building and fire safety permits; and (4) compliance with foreign ownership rules if foreign capital is involved. The exact set of requirements depends on whether the facility offers connectivity services to third parties or only hosts equipment.

Is a data center a "public service" or "public utility"?

This is the threshold question. Under Republic Act No. 11659 and its Implementing Rules and Regulations, a public service refers to those persons defined as such under Section 13(b) of Commonwealth Act No. 146, as amended. A public utility is a subset of public service and carries a stricter treatment, including nationality restrictions.

The IRR defines telecommunications broadly: any process enabling a telecommunications entity to relay and receive voice, data, electronic messages, and similar signals by wire, radio, or other electromagnetic, spectral, optical, or technological means. However, the same definition expressly excludes passive telecommunications tower infrastructure and components such as poles, fiber ducts, dark fiber cables, and value-added services as defined by Section 3(h) of Republic Act No. 7925.

This exclusion matters. A colocation facility that merely leases space, power, and cooling is not, by that fact alone, engaged in telecommunications. But a data center that also provides transmission, switching, or connectivity to the public for compensation may fall within the regulated space.

Franchise and CPCN requirements

Under Section 16 of Republic Act No. 7925, no person shall commence or conduct the business of being a public telecommunications entity without first obtaining a franchise. A franchise is a privilege conferred by Congress authorizing an entity to engage in a certain type of telecommunications service.

The NTC may grant a Certificate of Public Convenience and Necessity (CPCN), and may impose conditions on duration, termination, equipment standards, rates, and service. The CPCN shall not be shorter than five (5) years, nor longer than the life of the franchise.

For entities that do not build their own network, Section 11 of R.A. No. 7925 provides that a value-added service (VAS) provider need not secure a franchise, provided it does not put up its own network. A VAS provider may offer specialized services and lease telecommunications equipment and facilities, subject to network compatibility.

If the data center is a VAS provider, the NTC's prior approval is required to ensure the offering is not cross-subsidized from utility operations, other VAS providers are not discriminated against, and separate books of accounts are maintained.

SEC registration and corporate structure

A data center operating as a corporation must register with the SEC under the Revised Corporation Code (Republic Act No. 11232). Section 10 allows up to fifteen (15) incorporators, and each incorporator of a stock corporation must own or subscribe to at least one share. Section 11 provides that a corporation has perpetual existence unless its articles of incorporation provide otherwise.

The articles of incorporation must state the specific purpose or purposes of the corporation. Where a corporation will engage in an activity reserved for Filipino citizens, the standard restriction on transfers that would reduce Filipino ownership below the required percentage must be indicated in the articles and on stock certificates.

Foreign ownership considerations

Under the amended Public Service Act regime, the IRR provides that the relevant Administrative Agency shall not impose nationality requirements on a public service that is not classified as a public utility. This is a significant liberalization: services that are public services but not public utilities may be opened to full foreign equity.

However, certain categories remain subject to foreign ownership limits, including services classified as critical infrastructure — defined in the IRR as any public service that owns, uses, or operates systems and assets so vital to the Republic that their incapacity or destruction would have a detrimental impact on national security, including telecommunications and other vital services declared by the President.

Foreign state-owned enterprises are also subject to specific definitions and restrictions under the IRR. Any data center project with foreign government-linked investors should be assessed carefully against these provisions.

Business permits, building, and fire clearances

Under the Ease of Doing Business and Efficient Government Service Delivery Act of 2018 (Republic Act No. 11032) and its IRR, a business must secure a business permit from the city or municipal government, usually through its Business Permits and Licensing Office. LGUs are required to maintain a Business One Stop Shop (BOSS) — a single site or online portal to receive and process applications, receive payments, and issue approved licenses, clearances, permits, or authorizations.

Data centers, as buildings with significant electrical and mechanical systems, will also require a building permit and a Fire Safety Evaluation Clearance (FSEC) issued by the Bureau of Fire Protection prior to the issuance of the building permit, with the balance due after final inspection and before the use and occupancy permit. A Fire Safety Inspection Certificate (FSIC) is issued after the fire safety inspection and payment of required fees.

The IRR also requires agencies to publish a Citizen's Charter describing the checklist of requirements, procedures, responsible persons, maximum processing time, fees, and complaint procedures for each service.

Frequently asked questions

Does a data center need an NTC franchise in the Philippines? Only if it operates as a public telecommunications entity — that is, it provides telecommunications services to the public for compensation. A pure colocation facility that does not offer connectivity services may not need a franchise, but a VAS provider still needs NTC approval.

Can foreigners own a data center in the Philippines? It depends on classification. If the data center is a public service but not a public utility, the relevant Administrative Agency cannot impose nationality requirements. If it is classified as a public utility or critical infrastructure, foreign ownership limits apply.

What permits does a data center need from the local government? At minimum, a business permit from the city or municipality, a building permit, a Fire Safety Evaluation Clearance before the building permit, and a Fire Safety Inspection Certificate before the use and occupancy permit.

Practical takeaways

• Determine first whether the facility is a public service, a public utility, or neither — this drives the entire compliance path.
• If providing connectivity to the public, secure a franchise from Congress and a CPCN from the NTC; a CPCN runs at least five years.
• If operating as a VAS provider without your own network, a franchise is not required, but NTC prior approval and separate books of accounts are.
• Register the operating corporation with the SEC and confirm the foreign ownership rules applicable to your classification.
• Secure LGU business permits, building permits, and BFP fire safety clearances under the Ease of Doing Business Act framework.

Primary sources

The rules discussed above are drawn from the following primary sources, as published in the Official Gazette and the national statute book.

• IRR of REPUBLIC ACT NO. 11659 - IMPLEMENTING RULES AND REGULATIONS OF THE REPUBLIC ACT NO. 11659 OR AN ACT AMENDING COMMONWEALTH ACT NO. 146, OTHERWISE KNOWN AS THE PUBLIC SERVICE ACT, AS AMENDED

• REPUBLIC ACT NO. 11232 - AN ACT PROVIDING FOR THE REVISED CORPORATION CODE OF THE PHILIPPINES

• IRR REPUBLIC ACT NO. 11032 (CSC, ARTA, DTI Joint Memorandum Circular No. 2019-001) - THE IMPLEMENTING RULES AND REGULATIONS OF REPUBLIC ACT NO. 11032 OTHERWISE KNOWN AS THE "EASE OF DOING BUSINESS AND EFFICIENT GOVERNMENT SERVICE DELIVERY ACT OF 2018"

• REPUBLIC ACT NO. 7925 - AN ACT TO PROMOTE AND GOVERN THE DEVELOPMENT OF PHILIPPINE TELECOMMUNICATIONS AND THE DELIVERY OF PUBLIC TELECOMMUNICATIONS SERVICES

This article is general information and not legal advice. For your specific situation, consult a lawyer or ask ASG Legal AI.