,,c ^ ■>l
NINETEENTH CONGRESS OF THE ) 
REPUBLIC OF THE PHILIPPINES ) 
First Regular Session 
)
t0f(icr o( tl)f fi)i-r:rlrirp
*22 OCT-5 P5 51
SENATE
S.B. No. I<i67
RECEIVtDB'.:
Introduced by SENATOR IMEE R. MARCOS
AN ACT
AMENDING REPUBLIC ACT NO. 10173, OTHERWISE KNOWN AS THE 
"DATA PRIVACY ACT OF 2012", AND FOR OTHER PURPOSES
EXPLANATORY NOTE
Article II, Section 15 of the 1987 Constitution provides that "the State shall 
protect and promote the right to health of the people and instill health consciousness 
among them."
On 8 March 2020, President Rodrigo Roa Duterte issued Proclamation No. 922, 
declaring the entire country under a state of public health emergency due to the Corona 
Virus-19 (COVID-19) pandemic. The pandemic still pervades as a global public 
challenge to date. As of 2 September 2022, there have been three million, eight 
hundred eighty-three thousand, nine hundred fifty-seven (3,883,957) confirmed cases 
and sixty-one thousand, eight hundred and sixty-four (61,864) deaths due to the virus. 
While more than 1.6 million vaccine doses have been administered since the onset of 
the outbreak, new variants of the virus continue to emerge that may not be addressed 
by existing vaccines.
In order to significantly decrease the spread of the virus, persons suspected of 
COVID-19 infection must be identified. South Korea's success in flattening the curve of 
its confirmed cases within the course of a few weeks was made possible by its vigorous 
contact tracing system that involved the collection of every piece of personal data 
possible to find any connecting link between COVID-19 patents to slow down the spread 
of the virus. Its protocol even often involved replaying surveillance camera footage, 
speaking to witnesses, and doing everything possible to collect all "breadcrumbs a 
COVID-19 patient has left on the trail - a round the clock detective work.


Thus, healthcare workers and other officers must be provided with complete and 
accurate information in order to observe, diagnose and treat possibly infected persons; 
truly, in certain cases, false information or even mere lapses in patient background 
could prove to be fatal, not only for the patient and doctor, but even to the public at 
large. Hence, the urgency of excluding such circumstance is clearly warranted and 
undeniable.
IMEE R. MARCO^


1
2
3
4
5
6
7
8 
9
10
11
12
13
14
15
16
17
18
19
20 
21
NINETEENTH CONGRESS OF THE ) 
REPUBLIC OF THE PHILIPPINES ) 
First Regular Session 
)
I Senate
(Wfitf of tl)f ^n tvftnrp
•22 OCT-5 P5S1
SENATE
S.B. No. 1367
RECEIVED
Introduced by SENATOR IMEE R. MARCOS
AN ACT
AMENDING REPUBLIC ACT NO. 10173, OTHERWISE KNOWN AS THE 
"DATA PRIVACY ACT OF 2012", AND FOR OTHER PURPOSES
Be it enacted by the Senate and House of Representatives of the Philippines in Congress 
assembled:
SECTION 1. Section 4 of Republic Act No. 10173 is hereby amended to read as
follows:
"Section 4. Scope. This Act applies to the processing of all types of 
personal information and to any natural and juridical person involved in 
personal information processing including those personal information 
controllers and processors who, although not found or established in the 
Philippines, use equipment that are located in the Philippines, or those 
who maintain an office, branch or agency in the Philippines subject to 
the immediately succeeding paragraph: Provided, That the requirements 
of Section 5 are complied with.
This Act does not apply to the following:
(a) XXX
(1) XXX
(2) XXX
(3) XXX


1
2
3
4
5
6
7
8 
9
10
11
12
13
14
15
16
17
18
19
20 
21 
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
(4) XXX 
(b) XXX 
(C) XXX
(d) XXX
(e) XXX
(f) Information necessary for banks and other financial institutions under 
the jurisdiction of the independent, central monetary authority or Bangko 
Sentral ng Pilipinas to comply with Republic Act No. 9510, and Republic 
Act No. 9160, as amended, otherwise known as the Anti-Money 
Laundering Act and other applicable laws; [and]
(g) Personal information originally collected from residents of foreign 
jurisdictions in accordance with the laws of those foreign jurisdictions, 
including any applicable data privacy laws, which is being processed in 
the Philippines [.]; AND
(H) UPON DECLARATION OF A NATIONAL HEALTH EMERGENCY 
OR PANDEMIC, PERSONAL INFORMATION, INCLUDING 
PRIVILEGED AND SENSITIVE PERSONAL INFORMATION, THAT 
ARE NECESSARY TO ADDRESS THE HEALTH CRISIS. PROVIDED,
THE DEPARTMENT OF HEALTH (DOH) SHALL FIRST ISSUE 
GUIDELINES FOR ITS IMPLEMENTATION, TAKING INTO 
CONSIDERATION THE SAFETY AND WELFARE OF THE DATA 
SUBJECT, INCLUDING CIRCUMSTANCES WHEN MANDATORY 
PUBLIC DISCLOSURE OF PERSONAL INFORMATION SHALL BE 
IMPLEMENTED."
SEC 2. Repealing Clause. - All laws, executive orders, presidential decrees, 
presidential proclamations, rules and regulations or parts thereof which are inconsistent 
with the provisions of this Act are hereby repealed or modified accordingly.


1
2
3
4
SEC. 3. Effectivity. - This Act shall take effect fifteen (15) days after its 
publication in the Official Gazette or in two (2) newspapers of general circulation in the 
Philippines.
Approved,