Duty LXD-2606
Makes employment decisions, in the Philippines
Each law's tag says when it binds: since in force proposed proposed
NPC Advisory No. 2024-04: Guidelines on the Application of the Data Privacy Act to AI Systems Processing Personal Datasince 2 lines
NPC Advisory No. 2024-04 ()
- Complete a Privacy Impact Assessment before scraping personal data for AI training.
- Provide data subjects with transparency disclosures about the processing of their personal data.
Artificial Intelligence Development Act / AI Development and Regulation Act (House ICT Committee consolidation)proposed0 lines
House Bill No. 7396 and related House ICT Committee deliberations (20th Congress, 2026)
National Privacy Commission Circular on Registration of Data Processing Systems and Data Protection Officersin force1 line
NPC Circular No. 2022-04, Sections 5, 7 and 39 · Read the law's page
- A personal information controller or processor in the Philippines that employs 250 or more persons, processes the sensitive personal information of 1,000 or more individuals, or processes data likely to pose a risk to the rights and freedoms of data subjects must register all its data processing systems and its Data Protection Officer with the National Privacy Commission, within 20 days of a new system's commencement or a new appointment, and must update the registration within 10 days of a minor amendment; a system involving automated decision-making or profiling must always be registered.
Artificial Intelligence Regulation Act (AIRA)proposed5 lines
Senate Bill No. 25, 20th Congress (filed )
- This measure is in committee and binds nobody yet; what follows is what it would require if it is enacted in this form.
- Complete an algorithmic audit for high-risk AI systems.
- Complete an impact assessment for high-risk AI systems.
- Disclose to users when they are interacting with AI.
- Register AI systems.