How long did entities have to originally comply with the Data Privacy Act’s registration requirements?
Entities actively involved in the processing of personal data were historically given a specific time frame to fully transition their internal operations. They were legally required to formally register their data processing systems or automated operations within exactly one full year after the initial effectivity of the rules. However, a burdened personal information controller or processor could formally apply for a reasonable extension of this specific period upon showing good cause. These temporal requirements for initial legal compliance are clearly outlined in Section 67 IRR. “Personal information controllers and Personal Information processors shall register with the Commission their data processing systems or automated processing operations, subject to notification, within one (1) year after the effectivity of these Rules… For a period of one (1) year from the effectivity of these Rules, a personal information controller or personal information processor may apply for an extension of the period within which to comply with the issuances of the Commission.” 22-May-26About Nicolas and De Vega Law Offices
Nicolas and De Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com/.
