Final Rules and Regulations Implementing the Data Privacy Act Released, Taking Effect on 9 September 2016
On 25 August 2016, The National Privacy Commission (NPC), the agency tasked to implement and enforce the Data Privacy Act of 2012 (Republic Act No. 10173), issued the implementing rules and regulations (Rules) of said law. The Rules are a result of a series of public consultations held by the NPC beginning in June 2016 and of comments on the draft rules and position papers submitted to the NPC by various stakeholders such as representatives from banks, retail, education, research, health informatics, civil society, business process management, the migrant sector and government organizations. The Rules, which will take effect fifteen (15) days after publication or on 9 September 2016, are currently available at the NPC's website.