Technology Law Philippines
Navigate Philippine rules for electronic commerce, online contracts, electronic signatures, digital evidence, SaaS, cloud computing, software licensing, marketplaces and digital payments.
What does technology law cover in the Philippines?
Technology law in the Philippines is not one statute. The starting points are Republic Act No. 8792 for electronic transactions and signatures, the Civil Code for contracts, the Rules on Electronic Evidence for proof, the Internet Transactions Act for online commerce, the Data Privacy Act for personal data, the Intellectual Property Code for software and licensing, and sector rules for payments, telecommunications and regulated services. Common authorities include DTI, NPC, BSP, SEC, DICT, NTC, IPOPHL and the courts.
- Electronic transactions: RA 8792 and Civil Code contract rules
- Government digital services: RA 12254, the E-Governance Act
- Platforms and online sellers: Internet Transactions Act and consumer-protection rules administered principally by DTI
- Personal data: RA 10173 and NPC issuances
- Payments: National Payment Systems Act, BSP circulars and related financial-sector laws
- Software and content: RA 8293, licensing terms and contract law
- Evidence and disputes: Rules on Electronic Evidence, procedural rules and controlling jurisprudence
Choose the problem you need to solve
Begin with the closest real-world situation, then move into the governing rule, evidence and next action.
Explore CyberCode’s topic pillars and research route.
I need an online contract or e-signature
Electronic signatures and online contracts can be legally valid in the Philippines. RA 8792 generally prevents a record or signature from being denied legal effect solely because it is electronic. The safer validity test is whether the parties had capacity and consent, the terms and accepted version can be proved, the signer and act are reliably attributable, the record remains accessible for later reference, and no law requires a different form, notarization, witnessing or paper original for that transaction.
Review e-signature validity →I run a website or marketplace
Website and marketplace risk usually turns on five questions: did users receive clear notice and meaningfully accept the terms; were seller identity, price, refund, delivery and complaint disclosures complete; did the platform accurately define whether it is seller, intermediary or payment facilitator; are prohibited goods, counterfeit listings and complaints handled consistently; and are personal data and payment records processed lawfully and securely?
Review online terms →I am buying software, SaaS or cloud services
For SaaS and cloud services in the Philippines, review the contract, software license, data-processing roles, security duties, service levels, subprocessors, audit rights, payment terms, IP ownership, data portability, termination assistance and liability allocation. Regulated payments, personal data, government systems and sector-specific services may add BSP, NPC, DICT or other agency requirements.
Review SaaS clauses →I need to preserve digital evidence
Yes—screenshots, emails and chats may be admissible electronic evidence, but a screenshot is not automatically conclusive. The proponent must still establish relevance and authenticity, and may need to explain the source, account, device, participants, timestamps, completeness and preservation method. Preserve the original device and native record first; then save the full conversation or page, URL, profile details, headers or metadata, attachments, timestamps, export files and an untouched backup. Record who collected each item and every later transfer.
Preserve electronic evidence →Priority actions and decision path
Protect the deadline or evidence
If a dispute or incident already exists, preserve the native records, secure affected accounts or funds, and identify any filing, notice, refund or regulatory deadline before negotiating.
Classify the issue
Choose the closest track: contract or signature, electronic evidence, website or marketplace, software or cloud, payment, privacy, intellectual property, cybercrime, or government digital service.
Identify parties and regulator
Record each party’s role, location, platform, data, payment flow and regulated activity. Map DTI, NPC, BSP, SEC, DICT, NTC, IPOPHL or another sector authority only where its mandate fits.
Apply the controlling test
Check the relevant statute, contract, agency rules and exceptions. Separate legal validity from proof: a transaction may be valid but difficult to authenticate.
Choose the proportionate action
Correct the record or process, send notice, use the platform or regulator route, preserve a claim, or obtain counsel where money, rights, deadlines or enforcement exposure are significant.
I run a website or marketplace
| Risk area | Main question | Safer control |
|---|---|---|
| Website terms | Did the user receive clear notice and take an action showing assent to the applicable version? | Use conspicuous terms, affirmative acceptance where risk warrants it, version control, timestamps and retrievable acceptance records. |
| Seller and platform roles | Is it clear who sells, fulfills, collects payment, handles complaints and bears statutory responsibility? | State each role accurately; do not use contract language to disclaim duties imposed by the Internet Transactions Act or consumer law. |
| Consumer disclosures | Are identity, price, fees, delivery, refund, warranty and complaint routes shown before purchase? | Use a pre-purchase disclosure checklist and preserve the listing and checkout version shown to the buyer. |
| Listings and intellectual property | How are prohibited goods, counterfeits, copied content and repeat offenders handled? | Maintain notice-and-action procedures, seller verification, decision records and an escalation path. |
| Personal data and security | Does the operator have a lawful basis, proper notice, appropriate contracts and safeguards? | Apply data minimization, access control, retention limits, vendor oversight and breach-response procedures. |
| Payments and stored value | Is the operator performing a BSP-regulated payment activity or allocating chargeback and fraud risk? | Map the funds flow, use regulated providers where required, disclose fees and remedies, and preserve transaction records. |
Explore Technology Law Philippines by topic
These clusters connect the pillar guide to specific questions, procedures and supporting evidence.
Electronic transactions and signatures
Legal validity, consent and enforceability for digital agreements.
Electronic evidence
Screenshots, emails, chats and the records needed to establish reliability.
Software, SaaS and cloud
Key Philippine rules include the Civil Code and RA 8792 for contracting; RA 8293 for software copyright and licensing; RA 10173 and NPC issuances for personal data, processors and cross-border handling; RA 10175 for unauthorized access and security incidents; the Internet Transactions Act and consumer rules for online supply; RA 12254 for government digital systems; and BSP rules when the service handles regulated payments. Contracts should address service levels, security, subprocessors, breach response, audit, IP ownership, data return, portability, termination, business continuity, liability and governing law.
Platforms, commerce and payments
Consumer rights, platform responsibility and digital transaction risk.
Social media, recording and digital identity
Privacy, consent, recordings, photos, impersonation and emerging deepfake risks.
Connectivity and internet regulation
Open access, internet infrastructure and the regulatory framework created by the Konektadong Pinoy Act.
AI law and emerging regulation
Current Philippine AI rules, pending measures and changing legal risks for businesses and users.
Latest Technology Law Philippines guides
Every Cybercode article filed under this pillar appears here automatically, newest first.
-

How to File a DTI Complaint Against an Online Seller in the Philippines
File a DTI complaint against an online seller: where to submit, evidence to attach, mediation, adjudication and realistic outcomes.
-

SAFE Kids Act: House Advances HB 11566 on Social Media and Online Gaming
The House moved HB 11566 into conference proceedings on October 12, 2026. Here is what the proposed SAFE Kids Act would require—and what is not law yet.
-

Fake Discounts and Inflated Original Prices: Philippine Consumer Rights
A crossed-out original price may be misleading. Learn the Philippine 90-day price-comparison test, evidence to save and how to complain to DTI.
-

Wrong Recipient on InstaPay or GCash? How to Try to Get Your Money Back in the Philippines
Jurisdiction: Philippines · By the Cybercode.ph Editorial Team Last correction: October 24, 2026. We rechecked BSP Circular No. 1195, the BSP InstaPay FAQ, and the current GCash and Maya wrong-recipient support routes; added one action-focused FAQ; and normalized external source-link attributes. The Civil Code, small-claims and AFASA analysis were not comprehensively rereviewed in this correction.…
-

Can Stolen Game Skins, Characters or Virtual Land Be Treated as Property Under Philippine Law?
Stolen game skins and virtual land may be protectable digital assets or contractual rights in the Philippines. Learn how property, contract and cybercrime law may apply.
-

What Evidence Should You Save After a Gaming Ban, Item Theft or Fraudulent Transfer?
Preserve gaming-account evidence correctly after a ban, stolen virtual item or fraudulent transfer. Use this Philippine checklist for screenshots, logs, receipts and reports.
-

Lazada Item Not Delivered? Your Refund Rights and the 3-Day Clock in the Philippines
If a Lazada order never arrives, clause 3.5 of Lazada’s own terms gives you three days from the projected delivery date before you are deemed to have received it. RA 11967 Sec. 20 and the Consumer Act are why that clause is not the end of your claim.
-

Discord Blocking Challenge: Government Powers, Digital Workers’ Rights and Legal Remedies
Five petitioners challenge the Discord restriction. This commentary examines agency powers, constitutional limits, workers’ remedies, compensation and accountability.
-

Online Lending Harassment in the Philippines: Your Rights, Scam Warnings and Where to Report
A practical guide to the DICT–NPC–SEC online lending advisory: borrower rights, unfair debt collection, scam warning signs, evidence to save and where to report harassment in the Philippines.
-

Data Subject Rights in the Philippines: What to Do First, What to Ask and Where to Report
Know your Philippine data privacy rights with a practical matrix: what happened, what to do first, what to ask, and when and where to report to the NPC.
-

Lemon Law Philippines: Claims, Deadlines and Consumer Remedies
Know when the Philippine Lemon Law applies, how DTI claims work, and how consumers and businesses can resolve defective-product disputes fairly.
-

How an MSG Company Controls a Key AI Chip Material: Ajinomoto, ABF and What It Means for the Philippines
Ajinomoto, the MSG maker, holds more than 95% of the global market for ABF, the insulating film inside nearly every high-performance chip. What ABF is, why no one else makes it, how AI is growing demand, and what Philippine competition law says.
Official sources and standards
Check the controlling statute first, then the responsible regulator’s current circulars, orders and filing guidance. Court rules and jurisprudence control admissibility and disputed interpretation.
Frequently asked questions
Are electronic signatures legally valid in the Philippines?
Electronic signatures can be legally recognized when the applicable requirements are satisfied. The transaction, method of signing, identity and reliability of the electronic record all matter.
Are screenshots, emails and chats admissible as evidence?
They may be used as electronic evidence, but authenticity, relevance, completeness and the method used to preserve and present them can affect their weight and admissibility.
Are website terms automatically enforceable?
Not automatically. Clear notice, meaningful assent, fair terms, consumer rules and reliable records of the accepted version can all affect enforceability.










