{
  "node_id": "philippines-data-privacy-act-2012-ra-10173",
  "title": "Republic Act No. 10173: An Act Protecting Individual Personal Information in Information and Communications Systems in the Government and the Private Sector, Creating for this Purpose a National Privacy Commission, and for Other Purposes (Data Privacy Act of 2012)",
  "domain": "Data Protection & Privacy",
  "version": "1.0.0",
  "last_updated": "2026-04-18",
  "bluf": "The Philippines Data Privacy Act of 2012 (DPA) requires personal information controllers (PICs) and processors (PIPs) to implement organizational, physical, and technical security measures for data protection. Under Section 20(f), PICs must notify the National Privacy Commission (NPC) and affected data subjects of a personal data breach within 72 hours of discovery.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "gdpr-article-37-dpo",
    "gdpr-article-35-dpia",
    "iso-27701-privacy-information-management",
    "apec-cbpr-system-2011"
  ],
  "primary_citations_count": 7
}