Last materially reviewed: September 2, 2026
Direct Answer
Yes, in qualifying circumstances. Under the Philippine Data Privacy Act and NPC rules on data-subject rights, you may request the suspension, withdrawal, blocking, removal, or destruction of your personal data when legal grounds for erasure or blocking exist.
However, the right is not absolute. A company may refuse a request where continued processing is still necessary for a lawful purpose, legal obligation, legal claim, legitimate business purpose consistent with applicable retention standards, overriding public interest, or another lawful basis recognized by the rules.
Primary authority: National Privacy Commission — Right to Erasure or Blocking.
Key Takeaways
- The legal right is broader than simple “deletion” and includes blocking, withdrawal, removal, and destruction.
- You generally need a valid ground, such as unlawful processing, unauthorized use, unnecessary retention, or inaccurate or unlawfully obtained data.
- Companies may lawfully retain information in some situations.
- Make the request in writing and keep proof of delivery.
- If the company refuses, ask for its legal basis and consider escalating unresolved rights violations to the NPC.
Jump to a Section
- When you can request deletion
- When a company can refuse
- How to make the request
- Publicly available data
When Can You Request Erasure or Blocking?
The NPC states that a data subject may exercise the right where there is substantial proof that personal data is incomplete, outdated, false, unlawfully obtained, used for an unauthorized purpose, no longer necessary for the purpose for which it was collected, unlawfully processed, or handled in violation of data-subject rights. The right can also apply in qualifying cases where the data subject objects and there is no other lawful basis for continued processing.
Decision Snapshot
| Situation | Deletion request |
|---|---|
| Data is no longer needed for the original purpose | Potentially valid |
| Data was unlawfully obtained or used | Potentially valid |
| Company must retain records by law | May be refused |
| Data is needed to establish or defend a legal claim | May be refused |
When Can a Company Refuse?
A company may deny all or part of an erasure request where the personal data remains necessary for a lawful purpose recognized by the NPC rules, including compliance with a legal obligation, establishment or defense of legal claims, legitimate business purposes consistent with industry retention standards, or overriding public interest.
How Do You Make a Deletion Request?
- Identify yourself and the data or account involved.
- State that you are exercising your right to erasure or blocking under the Data Privacy Act.
- Explain the ground for the request.
- Specify what data you want deleted, blocked, withdrawn, or removed.
- Ask for written confirmation of the action taken or the legal basis for refusal.
- Keep copies of your request and the company’s response.
Can You Ask for Publicly Available Personal Data to Be Removed?
Yes, publicly available personal data can still be the subject of an erasure request in qualifying circumstances. NPC guidance also recognizes that a PIC may need to communicate with other controllers or third-party indexes regarding copies, search results, or links to pertinent personal data.
How Is This Different From the General Rights Page?
The existing Data Privacy Rights in the Philippines page explains the full set of rights. This guide focuses specifically on how to evaluate and exercise the right to erasure or blocking.
Frequently Asked Questions
Can I always force a company to delete my personal data?
No. The right to erasure or blocking is not absolute. An organization may have a lawful basis or legal obligation to retain certain information.
What should I include in a deletion request?
Identify the data or account involved, explain why you believe continued processing is no longer justified, and ask the organization to explain any legal basis for retention if it refuses the request.