Legal Insights
Plain-language guides and case briefs on Philippine law — researched from the firm's law library of 184,000+ statutes, Supreme Court decisions, and agency issuances, and written so non-lawyers can understand and act on them.
Get a cited, plain-language answer from 184,000+ statutes and decisions — free, no sign-up.
NPC Enforcement Fines in the Philippines: How the Privacy Commission Penalizes Violations
NPC enforcement fines in the Philippines are administrative penalties the National Privacy Commission may impose for violations of the Data Privacy Act of 2012.
Employee Data Retention in the Philippines: How Long Can Employers Keep Records
Employee data retention in the Philippines follows the Data Privacy Act rule that personal data must not be kept longer than necessary for its purpose.
Employee Monitoring in the Philippines: Data Privacy Rules Employers Must Follow
Employee monitoring in the Philippines is governed by the Data Privacy Act of 2012 and its IRR, which require transparency, legitimate purpose, and proportionality.
Employee Data Privacy Philippines: Employer's Guide to the Data Privacy Act
Learn how the Data Privacy Act of 2012 protects employee data in the Philippines and what employers must do to comply.
How to Conduct a Privacy Impact Assessment in the Philippines
Learn how to conduct a privacy impact assessment in the Philippines under the Data Privacy Act and its IRR, from risk mapping to safeguards.
AI Governance in the Philippines: What Organizations Must Put in Place
Building AI governance in the Philippines starts with Data Privacy Act compliance, NPC registration, and security measures for automated processing.
Privacy Impact Assessment in the Philippines: When It's Required
Learn when a Privacy Impact Assessment (PIA) is required in the Philippines under the Data Privacy Act of 2012 and its IRR.
Legal Hold and Document Preservation in the Philippines: A Compliance Guide
Learn how legal hold and document preservation work in the Philippines under the Data Privacy Act, including retention limits and litigation duties.
Cybersecurity Incident Response in the Philippines: Legal Obligations Under the Data Privacy Act
A cybersecurity incident in the Philippines triggers legal duties under the Data Privacy Act — from containment to breach notification to the National Privacy Commission.
Data Processing Outsourcing Agreement in the Philippines: DPA Rules
A data processing outsourcing agreement in the Philippines must meet the Data Privacy Act and NPC IRR requirements. Here is what the law requires.
Data Center Decommissioning in the Philippines: A Data Privacy Guide
Data center decommissioning in the Philippines requires secure disposal of personal data under the Data Privacy Act of 2012 and its implementing rules.
Corporate Compliance Calendar Philippines: SEC, BIR, DOLE and NPC Deadlines
Track your Philippine corporate compliance calendar: SEC reportorial requirements, BIR registration and invoicing rules, DOLE reports, and NPC data privacy duties.
Internet Transactions Act Compliance in the Philippines: What Online Sellers Must Know
Internet Transactions Act compliance in the Philippines requires online merchants, e-retailers, and e-marketplaces to follow RA 11967 rules on disclosures, redress, and data privacy.
Data Privacy Obligations of Philippine Online Sellers Under the Data Privacy Act
Online sellers in the Philippines must follow the Data Privacy Act of 2012 and the Internet Transactions Act when handling customer data. Here is what the law requires.
Data Sharing Agreements in the Philippines: Rules Under the Data Privacy Act
A data sharing agreement in the Philippines must follow the Data Privacy Act and its IRR. Learn what counts as data sharing and the rules that apply.
Cross-Border Data Transfer Mechanisms in the Philippines: How the Data Privacy Act Applies
Understand cross-border data transfer mechanisms in the Philippines under the Data Privacy Act, the NPC IRR, and the rules on accountability for transfers.
Privacy Notice Requirements in the Philippines: What the Data Privacy Act Requires
Privacy notice requirements in the Philippines flow from the Data Privacy Act and its IRR: tell people what data you collect, why, and how their rights work.
Fintech Regulation in the Philippines: BSP Rules and Licensing
Fintech regulation in the Philippines is shaped by BSP rules, the E-Commerce Act, and the Data Privacy Act. Learn the key legal requirements here.
Data Breach Notification Deadline in the Philippines: NPC Rules and Requirements
What is the data breach notification deadline in the Philippines? Learn the NPC's 72-hour rule, who must report, and how notification works under the Data Privacy Act.
Sensitive Personal Information in the Philippines: Stricter Rules Under the Data Privacy Act
Sensitive personal information in the Philippines covers race, health, education, genetic data, and government-issued numbers, and the Data Privacy Act applies stricter rules to it.
Data Processing Agreement in the Philippines: What the DPA and Its IRR Require
A data processing agreement in the Philippines is governed by the Data Privacy Act and its IRR, which require written outsourcing terms and impose duties on processors.
Data Protection Officer Philippines: Appointment and Duties Under the DPA
Learn the data protection officer Philippines requirements, including appointment criteria and duties under the Data Privacy Act and its IRR.
Data Breach Notification in the Philippines: The 72-Hour Rule
Learn the 72-hour data breach notification rule in the Philippines under the Data Privacy Act, including who must notify, what to report, and penalties.
AI Governance in the Philippines: What the Law Requires Today
AI governance in the Philippines today relies on the Data Privacy Act of 2012 and the Internet Transactions Act of 2023. Learn the key compliance rules.