The Philippines Data Privacy Act of 2012 (PDPA) (also known as Republic Act No. 10173) took effect on 8 September 2012 and along with the final implementing rules and regulations (IRR), is the comprehensive law governing data privacy in the Philippines. It sets forth obligations for both data controllers and data processors and extends certain rights to data subjects. The law also endowed a National Privacy Commission (NPC), responsible for enforcing and overseeing the law, with rulemaking power.
Google Cloud is committed to helping our customers meet their obligations under the PDPA by offering convenient tools and building strong privacy and security protections into our services and contracts. We have published a whitepaper describing how Google Cloud implements data privacy and security capabilities to help our customers comply with the PDPA.