Philippines: Issued NPC guidelines on AI Systems and Data Privacy Act of 2012

On 19 December 2024, the National Privacy Commission (NPC) issued guidelines for applying the Data Privacy Act of 2012 (DPA) to processing personal data in AI system development or deployment. The guidelines support compliance with the Act, covering privacy principles and ethical considerations. The guideline's provisions include supporting data subjects' rights, conducting Privacy Impact Assessments (PIA), adopting privacy-by-design principles, limiting biases in AI systems, data minimisation, and implementing organisational governance mechanisms.