National Privacy Commission

Short description: Data protection body of the Philippines

National Privacy CommissionKomisyon para sa Proteksyon ng Personal na Impormasyon

Agency overview
Formed| March 7, 2016 (2016-03-07)
Jurisdiction| Government of the Philippines
Headquarters| 25th–27th Floors, The Upper Class Tower, Quezon Avenue corner Scout Reyes St., Brgy. Paligsahan, Quezon City
Employees| 110 (2024)[1]
Annual budget| ₱362.511 million (2025)[2]
Agency executives|

* Atty. Johann Carlos S. Barcena, CESO III [3], Privacy Commissioner and Chairman
* Atty. Nerissa N. De Jesus [4], Deputy Privacy Commissioner
* Atty. Jose Amelito S. Belarmino II, MSc [5], Deputy Privacy Commissioner

Parent agency| Department of Information and Communications Technology
Website| privacy.gov.ph

The National Privacy Commission (NPC; Filipino: Komisyon para sa Proteksyon ng Personal na Impormasyon) is an independent government body in the Philippines created under Republic Act No. 10173 or the Data Privacy Act of 2012;[6] the Commission is mandated to administer and implement the provisions of the Act, and to monitor and ensure compliance of the country with international standards set for data protection.[7] While attached to the Philippines' Department of Information and Communications Technology (DICT) for purposes of policy coordination, it remains independent in the performance of its functions.[8] The Commission safeguards the fundamental human right of every individual to privacy, particularly information privacy, while ensuring the free flow of information for innovation, growth, and national development.[9]

In order to fulfill its mandate, the commission is vested with a broad range of powers, from receiving complaints and instituting investigations on matters affecting personal data protection to compelling entities to abide by its orders in matters affecting data privacy. It also represents the Philippine Government internationally on data protection related issues. The Commission formulates and implements policies relating to the protection of personal data, including the relevant circulars and advisory guidelines, to assist organisations in understanding and complying with the Data Privacy Act. The commission also reviews organizational actions in relation to data protection rules and issue decisions or directions for compliance where necessary. It is mandated to work with relevant sector regulators in exercising its functions.

Beyond regulating data protection issues, the NPC also undertakes public and sector-specific educational and outreach activities[10] to help organizations adopt good data protection practices and to help individuals to better understand how they may protect their own personal data from misuse.

## Contents

* 1 History
* 2 Commissioners
* 2.1 Current Commissioners
* 2.2 Past Commissioners
* 3 See also
* 4 References
* 5 External links

## History

The Data Privacy Act of 2012 is the first law in the Philippines which acknowledges the rights of Individuals over their Personal Data and Enforcing the responsibilities of entities who process them.

The initial definition was offered first in Republic Act 8792, Section 32 better known as the eCommerce Act of the Philippines and was formally introduced by the Department of Trade and Industry (DTI) on its Department Administrative Order #08 – Defining Guidelines for the Protection of Personal Data in Information Private Sector. Along with the Anti-Cybercrime Bill (now RA 10175), The first draft of the law started in 2001 under the Legal and Regulatory Committee of the former Information Technology and eCommerce Council (ITECC) which is the forerunner of the Commission on Information and Communication Technology (CICT). It was headed by former Secretary Virgilio "Ver" Peña and the committee was chaired by Atty. Claro Parlade. It was an initiative of the Information Security and Privacy Sub-Committee chaired by Albert P. Dela Cruz who was then President of PHCERT together with then Anti-Computer Crime and Fraud Division Chief, Atty. Elfren Meneses of the NBI. The administrative and operational functions was provided by the Presidential Management Staff (PMS) acting as the CICT secretariat.

With rising concerns by the Information Technology and Business Process Association of the Philippines (IBPAP) of an absence of a Data Privacy Law, Philippine Congress passed Senate Bill No. 2965 and House Bill No. 4115 on June 6, 2012. President Benigno S. Aquino III signed Republic Act No. 10173 or the Data Privacy Act of 2012 on August 15, 2012. The law was influenced by the Data Protection Directive and the APEC Privacy Framework.[11]

President Aquino appointed on March 7, 2016, Raymund Liboro as inaugural head of the commission with Damian Domingo O. Mapa and Ivy D. Patdu as inaugural deputy privacy commissioners.[12] With fixed terms of office, they continued with their roles during the administration of President Rodrigo Duterte.

After consultation with various private organizations, civil societies and a series of public hearings in Manila, Cebu and Davao, the Implementing Rules and Regulations[6] of the Data Privacy Act was signed on August 24, 2016. It took effect on September 9, 2016.[13]

In May 2016, the Commission formally investigated the Commission on Elections for the Commission on Elections data breach one of the largest security breach in government held personal data.[14] On February 21, 2017, NPC announced that the Commission on Elections was being investigated for another security breach due to alleged theft of a computer containing personal data of voters.[15]

The NPC also began coordinating with different sectors on privacy and data protection.[16] In 2016, the National Privacy Commission was accepted as a member in the International Conference of Data Protection and Privacy Commissioners and the Asia Pacific Privacy Authorities.

## Commissioners

### Current Commissioners

Commissioner | Title | Appointed

|
|

John Henry D. Naga  | Commissioner  | December 14, 2021[17]
Leandro Angelo Y. Aguirre | Deputy Commissioner | February 9, 2018[18]

### Past Commissioners

Commissioner | Title | Term

|
|

Raymund E. Liboro  | Commissioner  | March 7, 2016 - December 13, 2021[12]
Damian Domingo O. Mapa | Deputy Commissioner | March 7, 2016 – February 9, 2018[12]
Ivy D. Patdu | Deputy Commissioner | March 7, 2016 – December 5, 2019[12]

## See also

* List of data protection authorities by country

## References

1. ↑ Department of Budget and Management. "Staffing Summary Fiscal Year 2024". https://www.dbm.gov.ph/wp-content/uploads/Staffing/STAFFING2024/STAFFING-SUMMARY-2024.pdf.
2. ↑ "National Expenditure Program FY 2025 - National Privacy Commission". Department of Budget and Management. 2025. https://www.dbm.gov.ph/wp-content/uploads/NEP2025/DICT/C.pdf. Retrieved March 9, 2025.
3. ↑ https://privacy.gov.ph/about-us/#officials
4. ↑ https://privacy.gov.ph/about-us/#officials
5. ↑ https://privacy.gov.ph/about-us/#officials
6. ↑ 6.0 6.1 Republic Act No. 10173: An Act Protecting Individual Personal Information in Information and Communications Systems in the Government and the Private Sector, Creating for this purpose a National Privacy Commission, and for Other Purposes (2012)
7. ↑ Data Privacy Act, Section 7
8. ↑ Data Privacy Act, Section 9
9. ↑ Data Privacy Act, Section 2
10. ↑ Ronda, Rainier Allan (January 1, 2017). "Privacy body raises private sector awareness on data security". Philippine Star. http://www.philstar.com/headlines/2017/01/09/1661022/privacy-body-raises-private-sector-awareness-data-security.
11. ↑ "Philippine Data Privacy Law is Signed into Law". HL Chronicle of Data Protection. August 23, 2012. http://www.hldataprotection.com/2012/08/articles/international-eu-privacy/philippine-data-privacy-law-is-signed-into-law/.
12. ↑ 12.0 12.1 12.2 12.3 "DOST exec named first commissioner of National Privacy Commission". NewsBytes.ph. March 7, 2016. http://newsbytes.ph/2016/03/07/dost-exec-named-first-commissioner-of-national-privacy-commission/.
13. ↑ "IRR for Data Privacy Act released 4 years after passage of law". NewsBytes.ph. August 27, 2016. http://newsbytes.ph/2016/08/27/irr-for-data-privacy-act-released-4-years-after-passage-of-law/.
14. ↑ Ronda, Rainier Allan (January 6, 2017). "Comeleak: Bautista faces criminal raps". Philippine Star. http://www.philstar.com/headlines/2017/01/06/1660106/comeleak-bautista-faces-criminal-raps.
15. ↑ Nonato, Vince F. (February 21, 2017). "Another Comeleak? Theft probed". Philippine Daily Inquirer. http://newsinfo.inquirer.net/873559/another-comeleak-theft-probed.
16. ↑ de Villa, Kathleen (January 30, 2017). "Agency reminds bank on data privacy law". Philippine Daily Inquirer. http://newsinfo.inquirer.net/866488/agency-reminds-bank-on-data-privacy-law.
17. ↑ Cervantes, Filane Mikee (December 17, 2021). "John Naga appointed privacy commissioner". https://www.pna.gov.ph/index.php/articles/1163063.
18. ↑ Calimag, Melvin (February 9, 2018). "UP, Harvard law grad named new NPC deputy commissioner". NewsBytes.ph. http://newsbytes.ph/2018/02/09/up-harvard-law-grad-named-new-npc-deputy-commissioner/.

## External links

* No URL found. Please specify a URL here or add one to Wikidata.
* Republic Act No. 10173: Data Privacy Act of 2012

* v
* t
* e

Privacy

Principles|

* Expectation of privacy
* Right to privacy
* Right to be forgotten
* Post-mortem privacy

Privacy laws|

* Australia
* Canada
* Denmark
* England
* European Union
* Germany
* Ghana
* New Zealand
* Singapore
* Switzerland
* United States

Data protection authorities|

* Australia
* Denmark
* European Union
* France
* Germany
* Ireland
* Isle of Man
* Norway
* Philippines
* Spain
* Sweden
* Switzerland
* Thailand
* United Kingdom

Areas|

* Consumer
* Marital
* Medical
* Workplace

Information privacy|

* Law
* Financial
* Internet
* Personal data
* Personal identifier
* Privacy-enhancing technologies
* Social networking services
* Privacy engineering
* Secret ballot

Advocacy organizations|

* American Civil Liberties Union
* Center for Democracy and Technology
* Computer Professionals for Social Responsibility
* Future of Privacy Forum
* Electronic Privacy Information Center
* Electronic Frontier Foundation
* European Digital Rights
* Global Network Initiative
* NOYB
* Privacy International
* Privacy Rights Clearinghouse

See also|

* Anonymity
* Cellphone surveillance
* Cyberstalking
* Data security
* Global surveillance
* Mass surveillance
* Privacy engineering
* Human rights
* Identity theft
* Panopticon
* Personality rights
* Search warrant

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/National Privacy Commission. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=National_Privacy_Commission&oldid=4229070"
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template