National Privacy Commission

National Privacy Commission

Komisyon para sa Proteksiyon ng Personal na Impormasyon
Agency overview
Formed	March 7, 2016 (2016-03-07)
Jurisdiction	Government of the Philippines
Headquarters	5th Floor, Philippine International Convention Center, Vicente Sotto Avenue, Pasay
Annual budget	₱220.18 million (2022)[1]
Agency executives	John Henry D. Naga, Commissioner and Chairman Leandro Angelo Y. Aguirre, Deputy Privacy Commissioner Deputy Privacy Commissioner
Parent agency	Department of Information and Communications Technology
Website	www.privacy.gov.ph

The National Privacy Commission, or NPC, is an independent body created under Republic Act No. 10173 or the Data Privacy Act of 2012,^[2] mandated to administer and implement the provisions of the Act, and to monitor and ensure compliance of the country with international standards set for data protection.^[3] It is attached to the Philippines' Department of Information and Communications Technology (DICT) for purposes of policy coordination, but remains independent in the performance of its functions.^[4] The Commission safeguards the fundamental human right of every individual to privacy, particularly Information privacy while ensuring the free flow of information for innovation, growth, and national development.^[5]

In order to fulfill its mandate, the commission is vested with a broad range of powers, from receiving complaints and instituting investigations on matters affecting personal data protection to compelling entities to abide by its orders in matters affecting data privacy. It also represents the Philippine Government internationally on data protection related issues. The Commission formulates and implements policies relating to the protection of personal data, including the relevant circulars and advisory guidelines, to assist organisations in understanding and complying with the Data Privacy Act. The commission also reviews organizational actions in relation to data protection rules and issue decisions or directions for compliance where necessary. It is mandated to work with relevant sector regulators in exercising its functions.

Beyond regulating data protection issues, the NPC also undertakes public and sector-specific educational and outreach activities^[6] to help organizations adopt good data protection practices and to help individuals to better understand how they may protect their own personal data from misuse.