SyCipLaw has prepared a special report, published with Conventus Law, examining key updates and developments on the legal and regulatory framework governing cybersecurity in the Philippines.

On August 8, 2022, the NPC issued NPC Circular No. 2022-01 entitled "Guidelines on Administrative Fines" (Guidelines on Administrative Fines), which took effect on August 27, 2022.

On December 1, 2022, the NPC issued NPC Circular No. 2022-02 entitled "Amending Certain Provisions of NPC Circular No. 20-01 on the Guidelines on the Processing of Personal Data...

Pursuant to a statement by the NPC, as of 13 October 2023, the initial batch of data available...

On March 4, 2022, the Department of Trade and Industry (DTI), through its Consumer Protection Group and e-Commerce Division, issued Joint Administrative Order No. 2022-01...

The case of Grace M. Trimillos v. FCash Global Lending, Inc., G.R. No. 271360 (13 August 2025) was decided on the basis of a procedural issue...

On December 5, 2022, the National Privacy Commission (NPC), the Philippine's privacy regulator, issued NPC Circular No. 2022-04 entitled "Registration of Personal Data Processing System...

The Philippines continues to develop a fuller regulatory framework for artificial intelligence (AI) use. This is a brief round-up of legal initiatives and developments in local AI regulation.

On April 20, 2022, the NPC launched its Data Breach Notification and Management System (DBNMS) which it hailed as "a user-friendly interface that facilitates easy tracking and faster submission...

The collection and processing of personal information, including employee data, is governed by the Data Privacy Act of 2012. Data privacy regulations are implemented by the National Privacy Commission (NPC).

Computer use policies should have clear and reasonable guidelines on recognition of employee privacy in the workplace.

A Q&A guide answering common questions and concerns of the Data Privacy landscape in various Southeast Asian regions...

The government passed Republic Act (RA) No. 11765, otherwise known as Financial Products and Services Consumer Protection Act, to ensure that appropriate mechanisms are in place to protect...

On 14 September 2020, the National Privacy Commission ("NPC") issued Circular No. 20-01 setting forth the guidelines on the processing of personal data for loan-related transactions.

Applicable companies in the Philippines that missed the 8 September deadline to register their personal information controller and processor systems with the authorities should do so asap.

On 5 September 2022, and in line with its policy of enabling responsible innovation to promote the development of an inclusive digital financial ecosystem, the Bangko Sentral ng Pilipinas ("BSP") issued...

In the ever-evolving landscape of the modern world, being online has become an integral part of our daily lives.

This bulletin is on recent Philippine legal developments in data privacy, fintech and digital banks.

The Philippines has enacted the Data Privacy Act of 2012 or Republic Act No. 10173, which took effect in September 2012.

These last few years' leaps in technology have not spared the financial sector. The COVID pandemic only accelerated the pace.