Home / Glossary / Data Privacy Act of 2012
Data
Data Privacy Act of 2012
Data Privacy Act of 2012 is Republic Act No. 10173, the Philippine data-protection statute that created the National Privacy Commission and rules for processing personal information, including by foreign parties who.
How it works
If your EA in Cebu opens a U.S. customer inbox, you are processing personal data with a Philippine actor. Contracts need purpose, sharing rules, and security. NPC circulars add registration thresholds for some controllers. Extraterritorial language in the Act is why ‘we’re only in Delaware’ is not a complete answer. For a U.S. company hiring one Filipino teammate, write this into the brief, the employment contract, and the peso payroll file before the start date. Slack habits do not override the Labor Code, BIR, or NPC. If the local employer of record holds the paper, they run the statutory step; you still owe a clean operating definition so the seat does not fail in week three. Put a number on the example when you budget loaded cost, because a nameless allowance always returns as a December surprise or a missed SLA.
Example: customer emails live in a PH home office. You need access controls, a sharing note with the EOR, and a deletion path on exit. A shared Gmail password is a DPA incident waiting for a screenshot.
How it differs
NPC is the regulator. Personal information controller is the role. Sensitive personal information is the hotter subset.
Common errors
Dropping CSVs of customers into a personal Drive ‘for backup.’
In practice
Treat Data Privacy Act of 2012 as a week-one operating object. Name the system of record, the device, and who can still log in on the last day. If the answer is a shared password, stop. Write an owner - founder, local employer, or worker - and a date you will look at it again: first cutoff, first holiday, or first miss. If nobody can show a contract clause, a payslip line, a calendar block, or a checklist box, you do not have data privacy act of 2012 yet. You have a conversation. Convert the conversation before the person starts, while changing the deal still costs a paragraph rather than a resignation. Re-read the worked example above against the actual hire in front of you. If the numbers in that example cannot be swapped for this seat’s pesos, hours, and start date, the brief is still unfinished.