How Does The Philippines' Data Privacy Act Compare With The GDPR?

About Us
Protect Comply Thrive Visit our Webshop
IT Governance Blog
Blog Home Business Continuity Cyber Security  Data Protection  IT Best Practice 
IT Governance  PCI DSS Other Blogs 
How does the

Philippines’ Data
Privacy Act compare
with the GDPR?
 Luke Irwin  7th March 2018
Organisations in the Philippines should be used to

the Data Privacy Act, which came into effect in
2016. However, many organisations now face a SOCIAL MEDIA
new challenge in the form of the EU General Data
Protection Regulation (GDPR).    
Although the GDPR is an EU law, it applies to any 

organisation in the world that collects EU residents’
personal data. This means that any organisation
outside the EU will have to balance GDPR
compliance with their own country’s data protection
laws. This will be particularly tough in the
Philippines, as its data protection laws are as
intricately detailed as the GDPR. On the plus side,
any organisation that is already compliant with the
Data Privacy Act will have less work to do to meet
the GDPR’s requirements.
This blog compares some of the most important
terms and requirements of the GDPR with the Data
Privacy Act, helping organisations identify how to
approach GDPR compliance.
The definition of personal data

Data Privacy Act: Personal information refers to
any information, whether recorded in a material
form or not, from which the identity of an individual
is apparent or can be reasonably and directly
ascertained by the entity holding the information or
when put together with other information would
directly and certainly identify an individual.
GDPR: Personal data means any information WRITE FOR US

relating to an identified or identifiable natural
IT Governance is
person.
looking to publish
relevant, well-
Purpose limitation written, informative
Data Privacy Act: Personal data should be and original articles.
collected for specified and legitimate purposes If you have an
determined and declared before or as soon as article that meets
reasonably practicable after collection and later these criteria, then
processed in a way compatible with such declared, please send it in.
specified and legitimate purposes only.
GDPR: Personal data shall be collected for

specified, explicit and legitimate purposes and not Search the site
further processed in a manner that is incompatible
with those purposes.
Search
Data minimisation
Data Privacy Act: Personal data shall be adequate
and not excessive in relation to the purposes for
which they are collected and processed.
CATEGORIES
Business
GDPR: Personal data shall be adequate, relevant
Continuity
and limited to what is necessary in relation to the
purposes for which they are processed. Cyber Resilience
Access and correction Cyber Security
ISO 27001
Data Privacy Act: The data subject has the right
Risk
to dispute the accuracy of the personal data and
Management
have the personal data controller correct it
immediately and accordingly unless the request is Data Protection
unreasonable. EU GDPR
IT Best Practice
GDPR: The data subject has the right to know Project
what personal data concerning them is being Management
processed and to access the data and any
Other Blogs
information about the processing, including what
Breaches and
categories of data are processed and whether the
Hacks
data is being shared with third parties. They also
have the right to request the erasure of Podcast
illegitimately collected data and the rectification of PCI DSS
inaccurate data.
Get help preparing for the GDPR

Organisations that went through the compliance
process for the Data Privacy Act are no doubt
capable of complying with the GDPR, but it can be
daunting to learn a whole new set of terms and
requirements, particularly with the added difficulty
of remembering the differences between the two
laws.
Those in charge of GDPR compliance might benefit

from reading our book of the month, EU GDPR – A
Pocket Guide.
Written by IT Governance’s founder and executive

chairman, Alan Calder, this guide is the perfect
primer on the GDPR, explaining the terms and
definitions used in the Regulation, its key
requirements and how you can achieve compliance.
Save 10% when you buy before the end of March

>>
Related Posts
Indian BPO Challenges in Rise in data

industry faces comprehending breach
its biggest and complying notifications
challenge – with the GDPR post-GDPR
GDPR
compliance
About The Author

Luke Irwin
Luke Irwin is a writer for IT
Governance. He has a master’s
degree in Critical Theory and
Cultural Studies, specialising in
aesthetics and technology, and is a one-time
winner of a kilogram of jelly beans.
IT Governance Asia Blog Copyright © 2021.

How Does The Philippines' Data Privacy Act Compare With The GDPR?

Uploaded by

Copyright:

Available Formats

How Does The Philippines' Data Privacy Act Compare With The GDPR?

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

How Does The Philippines' Data Privacy Act Compare With The GDPR?

Uploaded by

Copyright:

Available Formats

About Us

Protect Comply Thrive Visit our Webshop

IT Governance  PCI DSS Other Blogs 

How does the

Organisations in the Philippines should be used to

Although the GDPR is an EU law, it applies to any 

The definition of personal data

GDPR: Personal data means any information WRITE FOR US

GDPR: Personal data shall be collected for

Get help preparing for the GDPR

Those in charge of GDPR compliance might benefit

Written by IT Governance’s founder and executive

Save 10% when you buy before the end of March

Indian BPO Challenges in Rise in data

About The Author

IT Governance Asia Blog Copyright © 2021.

You might also like