Skip to content

Regulation Tracker / Other

NPC Advisory No. 2024-04: Application of the Data Privacy Act to AI Systems Processing Personal Data

National Privacy Commission

last revised 2024-12-19last verified 2026-09-041 versioncountry page →

GuidanceIn forceClient consentConfidentialityRecord-keepingRisk classification

map categories:Data protection and legal AIClient data in AI toolsVendor due diligence

The National Privacy Commission's advisory applying Republic Act 10173, its implementing rules and NPC issuances to AI systems that process personal data across development, training, testing and deployment. It is the Philippines' baseline data-protection instrument for legal-sector AI use by firms and public bodies alike.

Applies to
firms, providers, all
Effective
19 Dec 2024
Current version
Original · 19 Dec 2024
Last verified
04 Sept 2026
Official text
www.privacy.gov.ph/wp-content/uploads/2025/02/Advisory-2024.12.19-Guid…

What the document requires

  • Applies the Data Privacy Act to AI systems across development, training, testing and deployment.
  • Addresses lawful bases, transparency and accountability for AI processing of personal data.
  • Companion advisory NPC Advisory No. 2026-01 covers scraping of publicly available personal data.

Version history

VersionDateWhat changedSource
Originalcurrent2024-12-19First version recorded.official

Sources

Cite this record

SafeLegalAI Legal AI Regulation Tracker, "NPC Advisory No. 2024-04: Application of the Data Privacy Act to AI Systems Processing Personal Data" (National Privacy Commission, Original, 2024-12-19), safelegalai.com/regulation/other/ph-npc-advisory-2024-04-ai-systems (accessed 2026-09-04). Data: CC BY 4.0.

More official documents in Other