Does the Data Privacy Act apply to entities processing data outside the Philippines?

Yes, the Data Privacy Act possesses an extraterritorial application under certain specific and defined conditions. It strictly applies to acts or practices engaged in outside the Philippines if the data processing relates to personal information about a Philippine citizen or a resident. It also thoroughly applies if the foreign entity has a notable link with the Philippines, such as a contract entered into the country or an unincorporated branch operating within its borders. The explicit rules governing this extended international jurisdiction are outlined in Section 6 Data Privacy Act. “SEC. 6. Extraterritorial Application. – This Act applies to an act done or practice engaged in and outside of the Philippines by an entity if: (a) The act, practice or processing relates to personal information about a Philippine citizen or a resident; (b) The entity has a link with the Philippines, and the entity is processing personal information in the Philippines or even if the processing is outside the Philippines as long as it is about Philippine citizens or residents…” 21-May-26

About Nicolas and De Vega Law Offices

 Nicolas and De Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com/.