Philippines: Passed Amendments to the Data Privacy Act of 2012 (HB No. 9651) including data protection authority governance

On 26 August 2021, the amendments to the Data Privacy Act of 2012 (HB No. 9651) passed the House of Representatives. The amendments expand the powers of the National Privacy Commission, enabling it to issue cease-and-desist orders, conduct investigations, impose administrative penalties, and recommend criminal prosecutions for violations of data privacy laws. The amendment provides for the reinforcement of the organisational structure of the National Privacy Commission (NPC), thereby enhancing its authority and extending the term limits for its officials. Moreover, the NPC is responsible for coordinating internationally with the objective of aligning Philippine data privacy standards with global regulations. Furthermore, the NPC is responsible for the publication and regular updating of administrative fines, as well as the dissemination of information regarding data protection legislation through seminars and other forms of public outreach.