Philippines: National Privacy Commission issued statement on nature of registration and its jurisdiction under Data Privacy Act 2012

On 13 October 2025, the National Privacy Commission (NPC) issued a statement reaffirming its role as the Philippines’ independent data protection authority under the Data Privacy Act of 2012. The statement clarified that registration with the Commission does not imply approval or confirmation of lawful data processing. It stressed that organisations remain responsible for compliance and safeguarding personal data. The NPC also stressed its exclusive authority to determine the legality of data processing activities and stated that only formal issuances, including decisions or orders.