No AI-specific law — data-protection and cybercrime law bindAI Laws in Philippines
No enacted national AI-specific statute was identified in the official Philippine sources reviewed through 16 September 2026. Several AI bills have been filed, but this page does not treat a proposal as enacted law. What binds a business deploying AI in the Philippines is therefore the existing digital stack. The Data Privacy Act of 2012 (RA 10173) requires a lawful basis and consent for processing, imposes proportionality, transparency and security duties, gives data subjects rights of access, correction, erasure, damages and — directly relevant to automated systems — a right under section 16(c) not to be subject to a decision based solely on automated processing where it significantly affects them, and it is administered by the National Privacy Commission. The Cybercrime Prevention Act of 2012 (RA 10175) covers illegal access, data interference and computer-related fraud and identity theft. The Internet Transactions Act of 2023 (RA 11967) created the E-Commerce Bureau and imposes duties on online platforms and merchants. The Electronic Commerce Act (RA 8792) gives electronic documents and signatures legal effect.
Applicable laws
Penalty: No AI-specific penalty exists. The binding exposure is the Data Privacy Act's Chapter VIII, read from the Act's own text: unauthorised processing of personal information carries one to three years’ imprisonment and a fine of PHP 500,000 to PHP 2,000,000, and of SENSITIVE personal information three to six years and PHP 500,000 to PHP 4,000,000 (s.25). Section 35 imposes the maximum of the applicable scale whenever the personal information of at least 100 people is harmed, affected or involved.
Live legislative tracker
Updated September 5, 2026AI and digital-regulation bills in motion and instruments in force in Philippines, pulled automatically from the official legislature feed.
The LawPhil Project (Arellano Law Foundation) is a secondary source. The Official Gazette of the Republic of the Philippines is the authoritative publication. lawphil.net terms of use
Guidance & voluntary frameworks (1)
Philippines has no binding AI-specific legislation in force that we track. That does not mean AI is ungoverned there. The official frameworks below are in effect and set out what regulators expect — and general law (data protection, consumer protection, sectoral and anti-discrimination rules) still applies to AI systems in the ordinary way. None of these is legislation and none creates a legal obligation by itself, so they are counted separately from binding law — never added to it. See our scope definition.
High-risk industries to watch in Philippines
US-based? Check your state laws too
If you're a US company serving Philippines customers, you need to comply with both your state's AI laws and Philippines regulation.
Anchored to the primary government source (statute, bill text, or agency rule) and verified directly against it · Last verified Sep 16, 2026. See our methodology.
- ↗privacy.gov.phhttps://privacy.gov.ph/data-privacy-act/
- ↗elibrary.judiciary.gov.phhttps://elibrary.judiciary.gov.ph/thebookshelf/showdocs/2/50264
- ↗elibrary.judiciary.gov.phhttps://elibrary.judiciary.gov.ph/thebookshelf/showdocs/2/96902