Data Privacy Act of 2012 Compliance for Life Sciences
The Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission establish the main framework for the protection of personal data in the Philippines.
The framework applies to public and private organisations, and may also apply to processing carried out abroad where the processing concerns Philippine citizens or residents and the organisation has a relevant link with the Philippines.
This is particularly important for Life Sciences organisations, as health and genetic information are classified as sensitive personal information. Organisations acting as Personal Information Controllers or Personal Information Processors must establish appropriate privacy governance, security measures and accountability throughout the data lifecycle.
Our Experts Are Here To Help You!
Ensure your compliance with the Philippines Data Privacy Act.
Key Requirements
- Lawful, transparent and proportionate processing of personal data;
- Enhanced protection for sensitive personal information;
- Appointment of a Data Protection Officer and appropriate privacy governance;
- Organisational, physical and technical security measures;
- Compliance with applicable registration requirements;
- Effective personal data breach management and notification;
- Protection of data subject rights;
- Accountability for vendors, data sharing and international transfers.
How MyData-TRUST Can Support You
- Develop a compliance roadmap tailored to your activities;
- Provide outsourced DPO support and privacy governance expertise;
- Support applicable registration requirements;
- Prepare and review privacy documentation;
- Assess privacy risks, security and breach management processes;
- Review vendors, data-sharing arrangements and international transfers;
- Provide practical guidance for clinical research and Life Sciences activities.
Why Compliance Matters for Life Sciences
- Builds trust in clinical trials and research projects;
- Implements safeguards for sensitive health data;
- Mitigates reputational and regulatory risks.
Why Choose MyData-TRUST?
- Legal expertise to ensure legislative compliance;
- Experience integrating privacy into Life Sciences projects;
- Practical support for research and patient data use;
- Guidance for cross-border clinical trial data processing.
Need support with the Philippines Data Privacy Act? Our Life Sciences privacy experts work with sponsors, CROs and healthcare organisations across the region.
