Data Privacy Act of 2012
• The Republic Act No. 10173 shall be known as the Data Privacy Act of 2012.
• Long Title: “An Act protecting individual personal information in information and communications
systems in the government and the private sector, creating for this purpose a National Privacy
Commission, and for other purposes.”
• This Act was approved on August 15, 2012.
• This Act states that consent must be documented and given prior to the collection of all forms of
personal data and the collection must be declared, specified and used for legitimate purpose.
• The subject must be notified about the purpose and extent of data processing, with details specifying
the need for automated processing, profiling and marketing, or sharing.