Cybercode Authority Hub · Technology Law

Technology Law Philippines

Navigate Philippine rules for electronic commerce, online contracts, electronic signatures, digital evidence, SaaS, cloud computing, software licensing, marketplaces and digital payments.

Direct answer

What does technology law cover in the Philippines?

Technology law in the Philippines is not one statute. The starting points are Republic Act No. 8792 for electronic transactions and signatures, the Civil Code for contracts, the Rules on Electronic Evidence for proof, the Internet Transactions Act for online commerce, the Data Privacy Act for personal data, the Intellectual Property Code for software and licensing, and sector rules for payments, telecommunications and regulated services. Common authorities include DTI, NPC, BSP, SEC, DICT, NTC, IPOPHL and the courts.

Start with your situation

Choose the problem you need to solve

Begin with the closest real-world situation, then move into the governing rule, evidence and next action.

Explore CyberCode’s topic pillars and research route.

I need an online contract or e-signature

Electronic signatures and online contracts can be legally valid in the Philippines. RA 8792 generally prevents a record or signature from being denied legal effect solely because it is electronic. The safer validity test is whether the parties had capacity and consent, the terms and accepted version can be proved, the signer and act are reliably attributable, the record remains accessible for later reference, and no law requires a different form, notarization, witnessing or paper original for that transaction.

Review e-signature validity →

I run a website or marketplace

Website and marketplace risk usually turns on five questions: did users receive clear notice and meaningfully accept the terms; were seller identity, price, refund, delivery and complaint disclosures complete; did the platform accurately define whether it is seller, intermediary or payment facilitator; are prohibited goods, counterfeit listings and complaints handled consistently; and are personal data and payment records processed lawfully and securely?

Review online terms →

I am buying software, SaaS or cloud services

For SaaS and cloud services in the Philippines, review the contract, software license, data-processing roles, security duties, service levels, subprocessors, audit rights, payment terms, IP ownership, data portability, termination assistance and liability allocation. Regulated payments, personal data, government systems and sector-specific services may add BSP, NPC, DICT or other agency requirements.

Review SaaS clauses →

I need to preserve digital evidence

Yes—screenshots, emails and chats may be admissible electronic evidence, but a screenshot is not automatically conclusive. The proponent must still establish relevance and authenticity, and may need to explain the source, account, device, participants, timestamps, completeness and preservation method. Preserve the original device and native record first; then save the full conversation or page, URL, profile details, headers or metadata, attachments, timestamps, export files and an untouched backup. Record who collected each item and every later transfer.

Preserve electronic evidence →
Practical framework

Priority actions and decision path

01

Protect the deadline or evidence

If a dispute or incident already exists, preserve the native records, secure affected accounts or funds, and identify any filing, notice, refund or regulatory deadline before negotiating.

02

Classify the issue

Choose the closest track: contract or signature, electronic evidence, website or marketplace, software or cloud, payment, privacy, intellectual property, cybercrime, or government digital service.

03

Identify parties and regulator

Record each party’s role, location, platform, data, payment flow and regulated activity. Map DTI, NPC, BSP, SEC, DICT, NTC, IPOPHL or another sector authority only where its mandate fits.

04

Apply the controlling test

Check the relevant statute, contract, agency rules and exceptions. Separate legal validity from proof: a transaction may be valid but difficult to authenticate.

05

Choose the proportionate action

Correct the record or process, send notice, use the platform or regulator route, preserve a claim, or obtain counsel where money, rights, deadlines or enforcement exposure are significant.

Platform risk map

I run a website or marketplace

Risk areaMain questionSafer control
Website termsDid the user receive clear notice and take an action showing assent to the applicable version?Use conspicuous terms, affirmative acceptance where risk warrants it, version control, timestamps and retrievable acceptance records.
Seller and platform rolesIs it clear who sells, fulfills, collects payment, handles complaints and bears statutory responsibility?State each role accurately; do not use contract language to disclaim duties imposed by the Internet Transactions Act or consumer law.
Consumer disclosuresAre identity, price, fees, delivery, refund, warranty and complaint routes shown before purchase?Use a pre-purchase disclosure checklist and preserve the listing and checkout version shown to the buyer.
Listings and intellectual propertyHow are prohibited goods, counterfeits, copied content and repeat offenders handled?Maintain notice-and-action procedures, seller verification, decision records and an escalation path.
Personal data and securityDoes the operator have a lawful basis, proper notice, appropriate contracts and safeguards?Apply data minimization, access control, retention limits, vendor oversight and breach-response procedures.
Payments and stored valueIs the operator performing a BSP-regulated payment activity or allocating chargeback and fraud risk?Map the funds flow, use regulated providers where required, disclose fees and remedies, and preserve transaction records.
Authority map

Explore Technology Law Philippines by topic

These clusters connect the pillar guide to specific questions, procedures and supporting evidence.

Software, SaaS and cloud

Key Philippine rules include the Civil Code and RA 8792 for contracting; RA 8293 for software copyright and licensing; RA 10173 and NPC issuances for personal data, processors and cross-border handling; RA 10175 for unauthorized access and security incidents; the Internet Transactions Act and consumer rules for online supply; RA 12254 for government digital systems; and BSP rules when the service handles regulated payments. Contracts should address service levels, security, subprocessors, breach response, audit, IP ownership, data return, portability, termination, business continuity, liability and governing law.

Fresh guidance

Latest Technology Law Philippines guides

Every Cybercode article filed under this pillar appears here automatically, newest first.

Quick answers

Frequently asked questions

Are electronic signatures legally valid in the Philippines?

Electronic signatures can be legally recognized when the applicable requirements are satisfied. The transaction, method of signing, identity and reliability of the electronic record all matter.

Are screenshots, emails and chats admissible as evidence?

They may be used as electronic evidence, but authenticity, relevance, completeness and the method used to preserve and present them can affect their weight and admissibility.

Are website terms automatically enforceable?

Not automatically. Clear notice, meaningful assent, fair terms, consumer rules and reliable records of the accepted version can all affect enforceability.