Republic Act No. 10173 — Data Privacy Act of 2012 · Republic Act No. 10175 — Cybercrime Prevention Act of 2012 · Republic Act No. 11967 — Internet Transactions Act of 2023 · Republic Act No. 8792 — Electronic Commerce Act (2000) — Status: No AI-specific law — data-protection and cybercrime law bind
The Philippines has not enacted an AI statute. That is a measurement, not a summary: LawPhil’s own search over the Republic Acts returns ZERO results for the phrase “artificial intelligence”, while the same query path returns the Data Privacy Act for its control terms. Several AI bills have been filed in Congress and none has become law. What binds a business deploying AI in the Philippines is therefore the existing digital stack. The Data Privacy Act of 2012 (RA 10173) requires a lawful basis and consent for processing, imposes proportionality, transparency and security duties, gives data subjects rights of access, correction, erasure, damages and — directly relevant to automated systems — a right under section 16(c) not to be subject to a decision based solely on automated processing where it significantly affects them, and it is administered by the National Privacy Commission. The Cybercrime Prevention Act of 2012 (RA 10175) covers illegal access, data interference and computer-related fraud and identity theft. The Internet Transactions Act of 2023 (RA 11967) created the E-Commerce Bureau and imposes duties on online platforms and merchants. The Electronic Commerce Act (RA 8792) gives electronic documents and signatures legal effect.