IoT Device Regulation in the Philippines: Which Laws and Agencies Apply

The Philippines does not yet have a single, stand-alone "IoT law." Instead, connected devices are governed by a patchwork of laws. Republic Act No. 10844, the Department of Information and Communications Technology Act of 2015, created the DICT as the primary policy and coordinating body for information and communications technology, with a mandate that expressly covers emerging ICT and convergence. The National Telecommunications Commission and the National Privacy Commission are attached to the DICT for policy and program coordination. Consumer-facing rules come from Republic Act No. 7394, the Consumer Act of the Philippines.

What counts as ICT and a connected device under Philippine law

Republic Act No. 10844 defines information and communications technology broadly, as the totality of electronic means to access, create, collect, store, process, receive, transmit, present, and disseminate information.

The same law defines convergence as the interface between and among various telephony, radio, video, broadcasting, and multimedia infrastructure, devices, and services, enabling users or subscribers to communicate with one another. This definition matters for IoT because connected devices sit precisely at that interface between networks, devices, and services.

The law also defines the ICT Sector to include those providing goods and services primarily intended to fulfill or enable information processing and communication by electronic means. The definition expressly lists ICT equipment manufacturers, ICT solution providers, internet service providers, and software developers. Businesses that build, import, or deploy connected devices therefore fall within the sector the law describes.

Who regulates IoT in the Philippines

Under Republic Act No. 10844, the DICT is the primary policy, planning, coordinating, implementing, and administrative entity of the Executive Branch for the national ICT development agenda.

The DICT's powers are relevant to connected devices in several ways. It may formulate, recommend, and implement national policies, plans, programs, and guidelines that promote the development and use of ICT, with due consideration to the advantages of convergence and emerging technologies. It may also prescribe rules and regulations for the establishment, operation, and maintenance of ICT infrastructure in unserved and underserved areas, in consultation with local government units, civil society organizations, the private sector, and the academe.

On consumer protection, the DICT is directed to ensure and protect the rights and welfare of consumers and business users as to privacy, security, and confidentiality in matters relating to ICT, in coordination with concerned agencies, the private sector, and relevant international bodies.

Two agencies are attached to the DICT for policy and program coordination under Republic Act No. 10844: the National Telecommunications Commission and the National Privacy Commission. Both continue to operate under their own charters, insofar as those charters are not inconsistent with the DICT Act.

Consumer protection rules that apply to connected devices

Republic Act No. 7394, the Consumer Act of the Philippines, declares it State policy to protect consumer interests, promote general welfare, and establish standards of conduct for business and industry.

The Act's objectives include protection against hazards to health and safety, protection against deceptive, unfair, and unconscionable sales acts and practices, and the provision of information and education to facilitate sound choice and the proper exercise of consumer rights.

The law also directs that the best interest of the consumer be considered in the interpretation and implementation of its provisions, including its implementing rules and regulations. For IoT sellers, this means marketing claims about a device's features, security, or performance are measured against consumer protection standards.

The Consumer Act's definition of consumer products and services covers goods, services, and credits primarily for personal, family, household, or agricultural purposes. The definition of commerce covers the sale, lease, exchange, traffic, or distribution of goods, commodities, productions, services, or property, whether tangible or intangible. Connected devices sold to households fall within these definitions.

Practical compliance steps for IoT businesses

Businesses introducing connected devices into the Philippine market should consider the following:

• Confirm which agency has jurisdiction. The DICT coordinates national ICT policy, while the NTC and NPC are attached to it for policy and program coordination and continue to operate under their own charters.
• Review consumer-facing claims. The Consumer Act prohibits deceptive, unfair, and unconscionable sales acts and practices, and requires that consumers be given information to make sound choices.
• Treat privacy and security as regulatory concerns. The DICT is mandated to protect consumer and business rights to privacy, security, and confidentiality in ICT matters.
• Monitor DICT issuances. The DICT may formulate rules and regulations to implement the objectives of Republic Act No. 10844, and its policy authority expressly extends to emerging technologies.

Frequently asked questions

Is there a specific IoT law in the Philippines? No single statute is devoted exclusively to IoT. Connected devices are covered by Republic Act No. 10844, which created the DICT and addresses emerging ICT and convergence, together with the Consumer Act and the charters of attached agencies.

Which agency regulates IoT devices in the Philippines? The DICT is the primary policy and coordinating body for ICT. The National Telecommunications Commission and the National Privacy Commission are attached to the DICT for policy and program coordination.

Do consumer protection laws apply to smart devices? Yes. Republic Act No. 7394 covers consumer products and services, and prohibits deceptive, unfair, and unconscionable sales acts and practices.

Practical takeaways

• The Philippines regulates IoT through multiple laws rather than one dedicated statute.
• Republic Act No. 10844 makes the DICT the lead ICT policy body, with a mandate covering emerging technologies and convergence.
• The NTC and NPC are attached to the DICT for policy and program coordination.
• The Consumer Act, Republic Act No. 7394, supplies the core consumer protection standards for connected devices sold to the public.
• The DICT may issue rules and regulations to implement its mandate, so businesses should track new issuances.

Primary sources

The rules discussed above are drawn from the following primary sources, as published in the Official Gazette and the national statute book.

• REPUBLIC ACT NO. 7394 - THE CONSUMER ACT OF THE PHILIPPINES

• IRR RUBPLIC ACT NO. 10844, October 17, 2016

• REPUBLIC ACT NO. 10844 - AN ACT CREATING THE DEPARTMENT OF INFORMATION AND COMMUNICATIONS TECHNOLOGY, DEFINING ITS POWERS AND FUNCTIONS APPROPRIATING FUNDS THEREFOR, AND FOR OTHER PURPOSES

This article is general information and not legal advice. For your specific situation, consult a lawyer or ask ASG Legal AI.