RA 10173: Data Privacy Act of 2012 — NPC overview page

Summary

The Data Privacy Act of 2012 (Republic Act No. 10173, signed 15 August 2012) protects the fundamental right to privacy and regulates the collection, processing, storage and disclosure of personal information by both public and private entities. The National Privacy Commission's overview page summarises the Act's principles — transparency, legitimate purpose, proportionality — and the rights of data subjects, including the right to be informed, to access, to rectification, to erasure or blocking, and to damages for unauthorized processing. It is the statutory basis for NPC complaints against online lending apps that scrape contact lists, shame borrowers, or otherwise mishandle personal data.