What is Data Privacy?

The right of an individual not to have private information about himself disclosed, and to live freely from surveillance and intrusion.

News & Events

PH, Singapore renew stronger ties in personal data protection

September 15, 2022

The Philippines and Singapore renewed their commitment to deepen their ties in personal data protection. In a Memorandum of Understanding (MOU) signed on September 7, 2022 by Privacy Commissioner John Henry D. Naga of the National Privacy Commission (NPC) and Commissioner Lew Chuen Hong of Singapore’s Personal Data Protection Commission (PDPC), the two countries reaffirmed […]


National Privacy Commission issues an Order to Telcos to cooperate on investigation of smishing attacks

September 9, 2022

Pasay City, September 8, 2022 —-The National Privacy Commission (NPC) orders telecommunication service providers, Globe Telecom Inc., Smart Communications Inc., and DITO Telecommunity, to submit a comprehensive audit report which shall include an examination of their respective distributor frameworks for their Subscriber Identity Modules (SIM cards) used in smishing messages that contain the names of […]


Statement of the National Privacy Commission on Targeted Smishing Messages

September 8, 2022

The result of the initial investigation of the National Privacy Commission (NPC) shows that data aggregators are unlikely to be the source of the recent wave of targeted smishing messages that specify the recipient’s name. The NPC, through its Complaints and Investigation Division, has observed from the smishing reports it received, that the smishing messages […]




Concerned organization, stakeholders, and other interested parties are invited to submit their comments/suggestions/opinions and other valuable inputs regarding the draft new registration circular to be adopted by the National Privacy Commission.

Please see attached NPC Circular for reference. click here

This Circular aims to replace NPC Circular 17-01, which, together with the new NPC Registration System, shall make it easy for personal information controllers, personal information processors, and individual professionals comply with the registration requirement of the Data Privacy Act of 2012.

With the launch of the DBNMS, the NPC will no longer accept Breach Notification and Annual Security Incident Report submissions except through the DBNMS online platform. Thus, submissions through email, personal filing, ordinary mail, licensed courier service, and any other mode of physical submission shall not be considered as valid.

All Personal Data Breach Notifications and Annual Security Incident Reports shall be submitted through https://dbnms.privacy.gov.ph .


Guidelines on the Lawful Processing of Personal and/or Sensitive Personal Information Based on Consent, Contract and/or Legitimate Interests

Click here for more details.

See the Guidelines on the Issuance of Certificate of Pending/No Pending Case here and the Request for Certificate of Pending/No Pending Case Form here.

Send your requests to [email protected] with the subject "CPNPC Request_<name of entity/individual>"

Announcement regarding validity of existing Certificate of Registration, revised process on new application, renewal, and amendment of registration, and guidelines on common Data Protection Officers. For more information click here.

The deadline of submission of the first batch applications for Accountability Agents (AA) for the APEC CBPR System is EXTENDED to January 15, 2022.

Documents for AA applicants are available here. For more details, click here.

Advisory on modified in-person or face-to-face hearing of cases for all parties with pending hearings with the NPC download here

There is an easier and safer way to file your complaints before the National Privacy Commission through the improved COMPLAINTS-ASSISTED FORM (CAF). Download the new version of the form here. Do not forget to attach a copy of your supporting documents.

Documents for Accountability Agent applicants for the APEC CBPR System are available here. Interested organizations must notify the National Privacy Commission of their intent and submit a completed application for an initial assessment to [email protected].

For inquiries, email us at [email protected]

For complaints, send your complaints-assisted form to [email protected]