National Privacy Commission
The National Privacy Commission is the Philippine government agency mandated by the Data Privacy Act of 2012 to administer, enforce, and promote data privacy regulation nationwide, serving regulated entities (PICs/PIPs), Data Protection Officers, and Filipino data subjects through registration systems, breach monitoring, public education, and international cooperation.
- Company typePublic
- Founded2016
- HeadquartersQuezon, Philippines
- Headcount51–100
- GTM typeB2B
- OfferingServices
What National Privacy Commission does
The National Privacy Commission (NPC) is the statutory regulatory agency of the Republic of the Philippines mandated to administer and enforce the Data Privacy Act of 2012 (Republic Act No. 10173). Established by law in 2012 and operational since March 2016, the NPC operates as an independent body under the Department of Information and Communications Technology, headquartered at the Upper Class Tower in Quezon City with 51-100 employees. The agency regulates all Personal Information Controllers (PICs) and Personal Information Processors (PIPs) operating in the Philippines, issues circulars and advisory opinions, monitors compliance, investigates complaints, and conducts enforcement actions including cease and desist orders and show-cause orders.
The NPC's core technology infrastructure comprises the NPCRS (National Privacy Commission Registration System) for mandatory DPO and Data Processing System registration, the DBNMS (Data Breach Notification Management System) for incident reporting, and the Compliance and Security Monitoring Command Center launched in December 2024 for centralized oversight. Supporting platforms include the Complaints-Assisted Form (CAF) for public complaints, ASK PRIVA for inquiries, the PhilHealth Data Leak Checker Portal, and the DPO Journal resource hub. Public education is delivered through the Privacy in the Spotlight (PITS) webcast, Kabataang Digital youth program, PSST public awareness initiative, and Privacy Awareness Week (PAW). The agency maintains international engagement through membership in the Global Privacy Assembly (where it became the first fee-funded secretariat in 2023) and the APEC CBPR system, alongside bilateral MOUs with Japan, South Korea, Singapore, UK ICO, Hong Kong, DIFC, Mexico INAI, and others.
The NPC's revenue model is government appropriation as primary funding source, supplemented by administrative fees for DPO/DPS registration, certification requests, and training provider licensing under the Data Privacy Competency Program (DPCP). Payment is processed through Land Bank of the Philippines Link.Biz Portal. The agency does not generate commercial revenue and has no private ownership or shareholders. Customer segments span regulated entities across all Philippine industries (financial services, healthcare, government, BPO, media, utilities, hospitality), individual Data Protection Officers (mandated appointment under the DPA), licensed training providers, and Filipino data subjects exercising statutory privacy rights.
National Privacy Commission firmographics
Firmographics- Name
- National Privacy Commission
- Legal name
- National Privacy Commission
- Website
- https://privacy.gov.ph
- Company type
- Public
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- The National Privacy Commission is the Philippine government agency mandated by the Data Privacy Act of 2012 to administer, enforce, and promote data privacy regulation nationwide, serving regulated entities (PICs/PIPs), Data Protection Officers, and Filipino data subjects through registration systems, breach monitoring, public education, and international cooperation.
- Ownership category
- akta.pro rank
National Privacy Commission industry classification
Industry- Product category
- Government Data Privacy Regulation
- NAICS
- Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (926150), Public Administration (92)
- akta.pro primary industry
- Data Protection, Privacy & Cybersecurity Regulators (BPAIAOAH)
- akta.pro secondary industry
- Privacy Governance & Consent Management (HDADAIAI)
Keywords
Where National Privacy Commission is headquartered
LocationHeadquarters
- HQ city
- Quezon
- HQ country
- Philippines
- HQ region
- Asia
Offices1 record
Markets served
National Privacy Commission business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Infrastructure, Marketing or Sales, Others
Revenue model
- Government Appropriation: Core operational funding from the Philippine government national budget
- Registration and Filing Fees: Fees collected for DPO registration, DPS registration, certification requests, and other administrative services as per the Schedule of Fees and Charges
- Training Provider Licensing: Fees related to licensing of training providers under the Data Privacy Competency Program (DPCP)
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Multi-year contract | DPO Registration/Renewal Fee |
| One time/ perpetual license | Multi-year contract | Data Processing System Registration Fee |
| Transaction based/ take rate | Pay-as-you-go | Filing Fees for Complaints |
Go-to-market motion1 record
Distribution channels7 records
Marketing channels12 records
National Privacy Commission product offering
Product offeringCore offering
The National Privacy Commission is the Philippine government agency mandated to administer and enforce the Data Privacy Act of 2012. It operates the NPC Registration System (NPCRS) and Data Breach Notification Management System (DBNMS), runs public education programs such as Privacy in the Spotlight and Kabataang Digital, issues circulars and advisory opinions, investigates complaints, and licenses training providers under the Data Privacy Competency Program. Its core offerings therefore consist of regulatory services, compliance/registration platforms, breach response infrastructure, and public privacy awareness initiatives delivered to regulated entities and data subjects.
Product overview
The National Privacy Commission operates a unified platform of regulatory and public-facing digital services centered on data privacy administration and enforcement. The core infrastructure consists of the NPCRS (NPC Registration System) for DPO and Data Processing System registration, and the DBNMS (Data Breach Notification Management System) for incident reporting—both mandatory online portals for PICs and PIPs compliance. Supporting these are public education programs including Privacy in the Spotlight (PITS) webcast series and Rated DP showcasing DPO practices; the Kabataang Digital youth initiative; PSST (Privacy Safety Security & Trust Online) education program; and the Data Privacy Competency Program for DPO training and certification. The Commission also offers certification products including the Philippine Privacy Trust Mark and NPC Seal of Registration, alongside direct services such as ASK PRIVA inquiry system, Complaints-Assisted Form for dispute filing, and the PhilHealth Data Leak Checker portal. The DPO Journal serves as a professional resource hub. The Compliance and Security Monitoring Command Center and Accountability Agent Recognition program round out the regulatory toolkit.
Differentiator
Problem solved
Functional benefit
Products and services
- NPCRS (NPC Registration System) Mandatory online portal for Personal Information Controllers and Processors to register, renew, and amend Data Protection Officers and Data Processing Systems under the Data Privacy Act and NPC Circular No. 2022-04.
- DBNMS (Data Breach Notification Management System) Official online platform for submitting Personal Data Breach Notifications (PDBN) and Annual Security Incident Reports (ASIR) to the National Privacy Commission, the only valid channel for breach reporting under NPC requirements.
- Compliance and Security Monitoring Command Center Centralized monitoring system for compliance and security incident management, providing the NPC with oversight of regulated entities' compliance posture and security events.
- PhilHealth Data Leak Checker Portal Public online portal (Na-leak ba ang PhilHealth Data ko?) allowing PhilHealth data subjects to check if their personal data was exposed in the PhilHealth data breach.
- Complaints-Assisted Form (CAF) Standardized digital complaint filing system available on the NPC website for data subjects to file complaints for alleged violations of the Data Privacy Act of 2012.
- ASK PRIVA Online public inquiry and assistance system that allows the public to ask data privacy questions and receive guidance from the National Privacy Commission.
- Philippine Privacy Trust Mark Trust certification mark issued by the NPC for businesses that demonstrates compliance with data privacy standards and adds value to cross-border data transfer assurance.
- NPC Seal of Registration Official seal of registration issued to compliant Personal Information Controllers and Processors, with mandatory display requirements for registered entities.
- Data Privacy Competency Program (DPCP) Comprehensive NPC training and certification program for Data Protection Officers, including the Foundational Course, Level 1 examinations, and licensing of training providers under the DPCP framework.
- Kabataang Digital Program NPC youth advocacy campaign under PSST with the theme 'Matalino, Mapagmatyag, at Mapanuri,' promoting a safe online environment for Filipino youth through regional caravans and educational materials.
- Privacy in the Spotlight (PITS) Webcast Webcast series in which data privacy experts and professionals discuss data privacy and protection topics, distributed via Facebook and YouTube to raise public awareness and educate viewers.
- PSST (Privacy Safety Security & Trust Online) NPC public education program covering data privacy, data protection, and fair information rights and responsibilities, with sub-programs and educational materials on eCommerce, social media, online games, search engines, and online videos.
- Rated DP Webcast NPC webcast showcasing data privacy practices, best practices, and compliance frameworks of exemplary organizations and their Data Protection Officers.
- DPO Journal Online portal and publication serving as a resource hub for Data Protection Officers, providing guidance, best practices, and professional development content.
- PAW Awards (Privacy Awareness Week Awards) Annual NPC awards program during Privacy Awareness Week recognizing outstanding data privacy practices in the public and private sectors.
- Accountability Agent Recognition Recognition program enabling organizations to achieve Accountability Agent status under APEC CBPR and Global CBPR systems for cross-border data flow certifications.
Companies that use National Privacy Commission
Customer profileNamed customers12 records
Segments6 records
Ideal customer profiles3 records
National Privacy Commission technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
National Privacy Commission partnerships and signals
Strategic signalPartnerships
31 partnerships are on record, tiered core.
- Asia Pacific Privacy Authorities (APPA) ForumcoreNPC strengthens regional ties and advances data privacy standards at the 65th APPA Forum in Hong Kong SAR China.
- Japan (Personal Information Protection Commission)coreJapan and the Philippines strengthen data privacy protection cooperation through bilateral MOU for enhanced collaboration in data privacy regulation, enforcement, and best practices exchange.
- MoroccocorePhilippines and Morocco strengthen ties on data privacy cooperation through bilateral partnership for cross-border data protection and privacy enforcement collaboration.
- Global Cross-Border Privacy Rules (CBPR) WorkshopcorePhilippines hosts Global Talks on Building Trust in Cross-Border Data Flows in Aklan, bringing together international privacy authorities.
- PAGCORcoreNPC and PAGCOR collaborate to foster responsible and secure digital gaming through policy guidance and compliance frameworks.
- PNP-Anti Cybercrime Group (PNP-ACG)coreNPC and PNP-ACG strengthen cybercrime response and data protection through strategic collaboration and joint enforcement efforts.
- Data Privacy CouncilcoreNPC and DP Council empower DPOs through Capacity Building and Leadership Training for enhanced privacy profession development.
- International Data Protection AuthoritiescorePhilippines hosts international data privacy authorities for closed sessions to strengthen global cooperation and enforcement alignment.
- Straits Interactive Pte. Ltd.coreNPC and Straits Interactive collaborate to enhance data privacy initiatives with generative AI through MOA for innovative technology integration.
- IsraelcorePhilippines and Israel deepen cooperation on personal data protection through bilateral MOU signed in Washington D.C.
- BermudacorePhilippines and Bermuda seal strategic partnership on cross-border data protection through MOU signing in Washington D.C.
- GCash (G-Xchange, Inc.)coreNational Privacy Commission and GCash collaborate to enhance data privacy awareness for Filipinos through joint initiatives and education campaigns.
- Turkey (Türkiye)corePhilippines and Turkiye forge landmark partnership to bolster global data protection efforts through bilateral cooperation framework.
- Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI - Mexico)coreNPC and INAI hold transition meeting for GPA fee-funded secretariat coordination and global privacy initiatives.
- Insurance Commission (IC)coreNPC and IC signed MOA to strengthen privacy practices in insurance industry through compliance frameworks and guidance.
- Data Privacy CouncilcoreNPC brings Kabataang Digital Caravan across PH regions to extend digital literacy and privacy awareness nationwide.
- South Korea (Personal Information Protection Commission - PIPC)coreSouth Korea and Philippines ink MOU to enhance data protection collaboration signed in Tokyo, Japan.
- APEC CBPR SystemcorePhilippines supports establishing international certification system promoting interoperability among different data protection frameworks through APEC Cross-Border Privacy Rules system.
- Global Privacy Assembly (GPA)corePhilippines takes proactive role in promoting global cooperation on cross-border data protection and privacy enforcement through GPA membership and hosting of Global CBPR Workshop 2025.
- Dubai International Financial Centre (DIFC)coreNPC and DIFC gain stronger foothold through MOU signing for enhanced cooperation in data privacy regulation.
- Canada and MaltacoreNPC strengthens global data protection cooperation with Canada and Malta at 45th Annual Meeting of Global Privacy Assembly.
- Department of Information and Communications Technology (DICT)coreDICT and NPC unite to launch innovative Privacy Complaint Hotline Project for enhanced citizen access to data privacy redress.
- Global Privacy Assembly (GPA)coreNPC takes lead as the First Fee-Funded Secretariat of Global Privacy Assembly, marking significant international leadership milestone.
- Hong Kong (Office of the Privacy Commissioner)corePhilippines and Hong Kong sign MOU on Personal Data Protection for enhanced cross-border privacy cooperation.
- National Bureau of Investigation (NBI)coreNPC and NBI collaborate to apprehend bomb threat suspect through joint investigative efforts.
- Telecommunications Companies (Telcos)coreNPC strengthens strategic partnership with Telcos through MOU signing to drive positive change and transformation in data protection compliance.
- Cybercrime Investigation and Coordinating Center (CICC)coreNPC and CICC sign MOA to thwart the use of ICT for data breaches and cybercrimes through coordinated enforcement.
- SingaporecorePhilippines and Singapore renewed stronger ties in personal data protection through MOU renewal.
- Philippine Competition Commission (PCC)coreNPC and PCC sign MOA to boost consumer and data privacy protection through joint enforcement and policy alignment.
- Cybercrime Investigation and Coordinating Center (CICC)coreNPC collaborates with CICC to strengthen Digital Forensic Laboratory capabilities for enhanced cybercrime investigation.
- UK Information Commissioner's Office (ICO)corePrivacy Commission firms up collaboration with UK counterpart in sharing best privacy practices through MOU.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
National Privacy Commission competitors and assessment
Company assessmentBroad incumbents
- CNIL (Commission Nationale de l'Informatique et des Libertés): France's data protection authority, one of the most established and well-resourced GDPR enforcement bodies in the EU. Comparable in regulatory function to NPC and a reference model for international cooperation.
Direct peers
- UK Information Commissioner's Office (ICO): UK's independent data protection authority, comparable in mandate to NPC as a national privacy regulator with rule-making, enforcement, and international cooperation functions. NPC signed an MOU with ICO in 2021 for sharing best privacy practices.
- Japan Personal Information Protection Commission: Japan's national data protection authority enforcing the APPI. NPC signed a bilateral MOU in June 2026 to strengthen cooperation in data privacy regulation and enforcement.
- Office of the Australian Information Commissioner (OAIC): Australia's independent privacy regulator under the Privacy Act 1988, with comparable functions of privacy complaint handling, regulatory guidance, and international engagement in the APEC CBPR framework.
- Singapore Personal Data Protection Commission (PDPC): Singapore's data protection authority under the PDPA, with a comparable Asian-regulator mandate covering registration, enforcement, and cross-border data flow frameworks. NPC renewed its MOU with Singapore in 2022.
- Hong Kong Office of the Privacy Commissioner for Personal Data (PCPD): Hong Kong's independent privacy regulator enforcing the Personal Data (Privacy) Ordinance. NPC signed an MOU with PCPD in 2023 for cross-border privacy cooperation, making it a direct peer in Asian privacy enforcement.
- Office of the Privacy Commissioner of Canada: Canada's federal privacy enforcement authority under PIPEDA. NPC strengthened cooperation with Canada at the 45th Global Privacy Assembly in October 2023, making it a relevant peer in cross-border privacy enforcement.
- South Korea Personal Information Protection Commission (PIPC): South Korea's national privacy regulator with broad rule-making and enforcement authority under the Personal Information Protection Act. NPC signed an MOU with PIPC in November 2024 for enhanced collaboration.
Others
- Global Privacy Assembly (GPA): International forum of data protection authorities. NPC serves as the first fee-funded GPA secretariat (since 2023), making GPA a peer in international governance rather than a direct competitor — a key institutional relationship for NPC's global standing.
Emerging players
- Straits Interactive Pte. Ltd. Singapore-headquartered data privacy training and AI governance solutions provider. Entered an MOA with NPC in June 2025 to enhance data privacy initiatives with generative AI — an emerging ecosystem partner at the intersection of AI and privacy.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights6 records
Customer concentration
National Privacy Commission social profiles
Digital presenceNational Privacy Commission compliance and trust
Trust signalCompliance1 record
National Privacy Commission financial estimates
Financial estimateRevenue estimate
Valuation estimate
National Privacy Commission leadership team
Management profileNumber of profiles
Profiles4 records
National Privacy Commission funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
National Privacy Commission M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about National Privacy Commission
What does National Privacy Commission do?
The National Privacy Commission is the Philippine government agency mandated to administer and enforce the Data Privacy Act of 2012. It operates the NPC Registration System (NPCRS) and Data Breach Notification Management System (DBNMS), runs public education programs such as Privacy in the Spotlight and Kabataang Digital, issues circulars and advisory opinions, investigates complaints, and licenses training providers under the Data Privacy Competency Program. Its core offerings therefore consist of regulatory services, compliance/registration platforms, breach response infrastructure, and public privacy awareness initiatives delivered to regulated entities and data subjects.
Is National Privacy Commission a public or private company?
National Privacy Commission is a public company. It is classified as state government owned and is currently operating.
When was National Privacy Commission founded?
National Privacy Commission was founded in 2016. It employs 51 to 100 people.
Where is National Privacy Commission based?
National Privacy Commission is headquartered in Quezon, Philippines, in the Asia region.
How does National Privacy Commission make money?
Three revenue lines are on record. Government Appropriation is the primary driver. The others are registration and Filing Fees and training Provider Licensing.
Who are National Privacy Commission's main competitors?
CNIL (Commission Nationale de l'Informatique et des Libertés) is listed as a broad incumbent. Direct peers are UK Information Commissioner's Office (ICO), Japan Personal Information Protection Commission, Office of the Australian Information Commissioner (OAIC), Singapore Personal Data Protection Commission (PDPC), Hong Kong Office of the Privacy Commissioner for Personal Data (PCPD), Office of the Privacy Commissioner of Canada and South Korea Personal Information Protection Commission (PIPC). Global Privacy Assembly (GPA) is listed as an others. Straits Interactive Pte. Ltd. is listed as an emerging player.
Does National Privacy Commission have an API?
No public API is recorded for National Privacy Commission.
What industry is National Privacy Commission in?
National Privacy Commission's product category is Government Data Privacy Regulation. Its primary akta.pro industry code is BPAIAOAH, Data Protection, Privacy & Cybersecurity Regulators, with a secondary code of HDADAIAI, Privacy Governance & Consent Management. Its NAICS code is 926150.