The Data Privacy Act or R.A. 10173 applies to processing of all types of personal information and any natural or juridical person involved in processing of said personal information. These entities may be personal information controllers or processors. Moreover, the DPA has extraterritorial applications to personal information controllers and processors who, although not found or established in the Philippines, use equipment that are located in the Philippines, or those who maintain an office, branch or agency in the Philippines subject to exceptions stated in Section 4 of the said Act.
Authors:
Enrique Dela Cruz, Senior Partner
Jay-R C. Ipac, Junior Partner
Terence Mark Arthur S. Ferrer, Senior Associate