iRealtee OS Glossary

National Privacy Commission

The NPC serves as the country's primary data privacy authority with three core functions:

National Privacy Commission

National Privacy Commission (NPC) is an independent regulatory body in the Philippines responsible for administering and implementing Republic Act No. 10173, also known as the Data Privacy Act of 2012. The NPC monitors and ensures compliance with international data protection standards across all industries handling personal information.

Core Mandate

The NPC serves as the country's primary data privacy authority with three core functions:

  • Enforcement — Investigate complaints, impose penalties, and ensure organizations comply with data privacy laws
  • Policy Development — Issue rules, regulations, and advisory opinions interpreting the Data Privacy Act
  • Public Education — Build a culture of privacy through awareness campaigns and capacity-building programs

The Commission operates independently from other government agencies to maintain objectivity when handling data privacy cases involving both public and private entities.

Key Services

The NPC provides the following services to organizations and individuals:

  • Registration of Data Processing Systems — Organizations processing personal data must register their systems with the NPC
  • Complaint Resolution — Data subjects can file complaints against organizations that violate their privacy rights
  • Advisory Opinions — Clarifications on how the Data Privacy Act applies to specific situations
  • Breach Notification Management — Organizations must report security breaches to the NPC within 72 hours
  • Data Protection Officer (DPO) Registration — Mandatory registration for designated DPOs of organizations
  • Certification and Seal Programs — Recognition for organizations demonstrating compliance with data privacy standards

Jurisdiction

The NPC has regulatory authority over:

  • All government agencies collecting personal data
  • Private companies and organizations operating in the Philippines
  • Foreign entities processing personal data of Filipino citizens
  • Contractors and subcontractors handling personal data on behalf of other organizations

The Commission's jurisdiction extends to any entity that processes personal information of individuals within Philippine territory, regardless of where the data processing occurs.

Relevance to Real Estate

In the Philippine real estate industry, the NPC plays a critical role in protecting client and agent data. Real estate brokerages, developers, and individual real estate service practitioners must comply with NPC requirements when handling:

  • Client personal information during property inquiries
  • Agent registration data including PRC license numbers and government IDs
  • Financial records from property transactions
  • Marketing databases with prospect contact details

Realty hubs and brokerage firms using CRM systems must implement data privacy compliance measures including:

  • Obtaining proper consent before collecting personal data
  • Appointing a registered Data Protection Officer
  • Registering data processing systems with the NPC
  • Implementing security measures to protect stored information
  • Configuring privacy policy settings for lead generation forms

Failure to comply can result in penalties ranging from PHP 500,000 to PHP 5,000,000 and imprisonment of one to six years under the Data Privacy Act.

Official Resources

References

Looking for another term? Browse the full glossary.

Back to Glossary