Last materially reviewed: September 3, 2026
Direct Answer
As of September 3, 2026, the Philippines does not yet have one comprehensive, enacted AI Act governing every artificial-intelligence system. Instead, AI is already regulated through existing laws such as the Data Privacy Act, consumer-protection rules, intellectual-property law, cybercrime law, employment law, sector regulations, contract law and other general legal frameworks. At the same time, Congress is considering multiple AI-specific measures.
The National Privacy Commission has already issued dedicated guidance applying the Data Privacy Act to AI systems that process personal data, while the Department of Trade and Industry has adopted the National AI Strategy Roadmap 2.0. Several bills filed in 2026 seek broader national AI governance, rights, accountability and sector rules.
Primary authority: NPC Advisory No. 2024-04 on AI systems processing personal data. Pending bills are identified separately from enacted law.
Key Takeaways
- There is currently no single comprehensive Philippine AI Act in force.
- The Data Privacy Act already applies when AI systems process personal information.
- NPC Advisory No. 2024-04 specifically addresses AI systems processing personal data.
- DTI’s National AI Strategy Roadmap 2.0 includes ethics and governance as important themes.
- Multiple AI bills are pending in the 20th Congress, including proposals for a national AI governance framework and an AI Bill of Rights.
- Businesses should not wait for a future AI Act before creating governance, privacy, security and human-oversight controls.
Jump to a Section
- What laws currently apply to AI?
- AI and the Data Privacy Act
- AI bills pending in 2026
- What businesses should do now
- What to watch next
What Philippine Laws Already Apply to AI?
AI does not operate in a legal vacuum. Depending on the use case, existing rules may already govern:
- Personal data: Republic Act No. 10173, the Data Privacy Act.
- Cybercrime: Republic Act No. 10175 where AI is used in conduct that falls within covered cybercrime offenses.
- Consumer transactions: consumer-protection laws and the Internet Transactions Act for covered online commerce.
- Contracts: Civil Code principles and the Electronic Commerce Act for electronic transactions.
- Copyright and intellectual property: existing IP law, subject to difficult emerging questions about training data and AI-generated outputs.
- Employment: labor and anti-discrimination rules where AI is used for hiring, monitoring, discipline, scheduling or evaluation.
- Sector rules: banking, insurance, health, education, telecommunications and other regulated industries can impose additional obligations.
AI and the Data Privacy Act
NPC Advisory No. 2024-04 provides guidance on applying the Data Privacy Act, its IRR and NPC issuances to AI systems that process personal data. This means organizations deploying AI should assess lawful basis, transparency, proportionality, security, data-subject rights, automated decision-making risks, data minimization, retention and accountability.
In August 2026, the NPC also reminded the public that a real person’s face and likeness are personal information and that creating, posting or sharing AI-generated images or videos using an identifiable person’s likeness can constitute processing of personal data. That guidance is particularly relevant to deepfakes. See Are Deepfakes Illegal in the Philippines?.
Decision Snapshot
| AI use | Current legal concern |
|---|---|
| AI chatbot using customer conversations | Privacy, security, consumer and contract issues |
| AI hiring or employee scoring | Privacy, labor, fairness and human-review issues |
| Face recognition or likeness generation | Personal data, biometrics, consent and misuse risks |
| Generative AI used for marketing | Copyright, consumer deception, privacy and brand risk |
| AI agent entering transactions | Authority, contract, evidence and accountability issues |
Important AI Bills Pending in 2026
Congress is actively considering several approaches rather than one settled framework.
HB 10362 — National AI Governance Framework / AI Bill of Rights
House Bill No. 10362, filed July 29, 2026, proposes a national AI governance framework, an Artificial Intelligence Bill of Rights, a multi-stakeholder advisory council, AI literacy and institutional readiness measures, responsible innovation, worker protection and penalties. As of September 3, 2026, it is pending with the House Committee on Information and Communications Technology.
HB 11007 — Comprehensive AI Regulatory Framework
House Bill No. 11007 was filed August 27, 2026 and read on September 2, 2026. It proposes a comprehensive regulatory framework for the use of artificial intelligence and is pending with the relevant House committee.
HB 9601 — Development and Regulation of AI
House Bill No. 9601, filed June 1, 2026, seeks to promote the development and regulation of AI in the Philippines.
Other AI Measures
Other 2026 measures address specific issues such as AI-assisted identity theft and fraud, deepfakes, AI agents and sector-specific use. Because these are bills, not enacted statutes, their text and status can still change substantially.
DTI National AI Strategy Roadmap 2.0
DTI launched the National AI Strategy Roadmap 2.0 and the Center for AI Research in July 2024. The roadmap expands the country’s earlier AI strategy and incorporates generative AI, ethics and governance, workforce development, research and infrastructure.
What Should Philippine Businesses Do Now?
- Create an AI inventory. Know what AI tools employees, vendors and systems are using.
- Classify data. Do not allow confidential or personal data to be uploaded into AI tools without an approved basis and controls.
- Assess vendors. Review data use, retention, model training, sub-processors, security and deletion practices.
- Set human-review rules. High-impact decisions should not be blindly delegated to AI.
- Create an employee AI policy. Define acceptable tools, prohibited data, approval requirements and accountability.
- Document risks and decisions. Keep records showing why a system was adopted and how risks are managed.
- Prepare for changing rules. Assign responsibility for tracking legislation and regulator guidance.
What Should We Watch Next?
The main development to watch is whether Congress consolidates the competing AI proposals into a national framework. Businesses should also monitor NPC guidance on AI, automated decision-making, data scraping, privacy engineering and synthetic media.
Frequently Asked Questions
Is ChatGPT illegal in the Philippines?
No. There is no general law banning ChatGPT or generative AI. The legal issue is how the tool is used and what data, content, decisions or transactions are involved.
Can a company use AI on employee data?
Potentially, but the Data Privacy Act and employment rules still apply. Employers should assess lawful basis, transparency, proportionality, security and the impact of automated or AI-assisted decisions.
Is an AI bill already law?
As of September 3, 2026, the major comprehensive AI-governance measures discussed above remain bills, not enacted laws.