PAW 2026: NPC celebrates a decade of privacy leadership, calls for responsible AI governance
The National Privacy Commission (NPC), with the support of the Department of Information and Communications Technology (DICT), celebrated the National Data Privacy Awareness Week (PAW) with the theme “ANAMNESIS: Looking Back and Moving Forward”, highlighting a decade of advancing data privacy and protection in the Philippines. The culminating two-day event, the PAW Awards 2026 and the National Data Privacy Conference, was held at Okada, Manila on 27-28 May 2026. This year’s celebration also coincided with the NPC’s 10th anniversary, marking ten years since the establishment of the NPC as the country’s privacy watchdog.
The PAW Awards 2026 carried the subtheme “10 for 10”, recognizing ten outstanding organizations and individuals for their contributions to privacy and data protection. The National Data Privacy Conference, with the subtheme “Digital Bayanihan: Nurturing Privacy Consciousness in the Age of AI,” focused on the opportunities and challenges brought by artificial intelligence and emerging technologies.
In his keynote message, Secretary Henry R. Aguda of Department of Information and Communications Technology (DICT) emphasized the shared responsibility of protecting personal data in an increasingly digital society. “Privacy is no longer just a legal requirement. Cybersecurity is no longer just a technical concern. These are now shared national responsibilities. This is why we must ensure that we regulate AI while enabling innovation. We cannot slow down progress, but we must guide it,” Secretary Aguda stated.
Looking Back: NPC Accomplishments in 2025
In his Privacy Commissioner’s Report, Atty. Johann Carlos S. Barcena highlighted the accomplishments and accolades received by the NPC in the past year across its five core mandates: public education, policy development, international cooperation, regulatory enforcement, and institutional governance.
In the area of public education, the NPC expanded its reach beyond Metro Manila through nationwide roadshows conducted in Cebu, Davao, Pampanga, and Metro Manila, equipping 982 privacy practitioners with practical knowledge on responsible data processing and compliance. The NPC also convened the first-ever Government Sector Data Privacy Summit, gathering Data Protection Officers from local government units, national government agencies, government-owned and controlled corporations, and state universities and colleges.
The NPC likewise continued to strengthen privacy awareness among the youth through its Kabataang Digital program. Since its launch in 2020, the initiative has engaged a cumulative total of 24,318 young Filipinos. Complementing these efforts were the NPC’s digital education initiatives, including “Rated DP with Josh,” which garnered more than 95,000 views and engagements, and “Privacy in the Spotlight,” which surpassed 640,000 total views and earned a Bronze recognition at the 2026 ASEAN Digital Awards in Vietnam.
On policy development, the NPC issued several key issuances and advisories addressing emerging technologies and digital risks. Among these were the Guidelines on the Processing of Personal Data Collected Using Body-Worn Cameras, the clarification on Data Sharing Agreements, the Public Advisory on Online Lending Platforms issued jointly with the Department of Information and Communications Technology and the Securities and Exchange Commission, and the NPC’s first-ever Privacy Engineering Advisory, which institutionalized privacy-by-design principles across system lifecycle processes.
The NPC also issued 16 advisory opinions and 215 complex inquiry responses involving lawful processing, data sharing, breaches, CCTV use, workplace disclosures, and data subject rights.
On the international front, the NPC strengthened the Philippines’ position in global privacy governance. The agency hosted the 2025 Global Cross-Border Privacy Rules Forum Fall Workshop in Boracay Island, which gathered delegates from various countries. The NPC actively participated in more than 20 international bodies and working groups, including those under ASEAN, APEC, the Global Privacy Assembly, and the Asia Pacific Privacy Authorities Forum.
Privacy Commissioner Barcena also highlighted the NPC’s strengthened enforcement and compliance efforts. Over the past year, the NPC handled 1,021 cases across multiple investigation streams. The NPC produced 2,159 enforcement outputs, including orders, technical reports, fact-finding reports, preliminary conferences, and adjudication referrals. It also conducted 2,390 compliance checks, 628 privacy sweeps, 54 on-site visits, and issued 1,377 citation tickets nationwide. These efforts led to increased compliance registrations, particularly in the healthcare sector, where approximately 2,100 healthcare professionals self-registered following NPC field visits.
The NPC Registration System also expanded significantly, recording 17,140 registrations covering organizations, professionals, and exemptions across both public and private sectors.
He further emphasized the NPC’s institutional recognitions, including the attainment of the following: PRIME-HRM Maturity Level II Bronze Award from the Civil Service Commission, five consecutive unmodified opinions from the Commission on Audit from 2021-2025 fiscal years, and Very Satisfactory ratings from the Department of Budget and Management’s Enhanced Agency Performance Review.
Moving Forward: Building Trusted Growth in the Age of AI
Looking ahead, Privacy Commissioner Barcena reaffirmed the NPC’s commitment to expanding privacy protection and strengthening public trust in an increasingly AI-driven digital environment.
Privacy Commissioner Barcena emphasized the need for broader nationwide reach, noting that while registrations in the NPC Registration System have significantly increased, much of the growth remains concentrated in the National Capital Region. To address this, the NPC in partnership with the DICT, plans to establish regional privacy desks in Northern Luzon, Visayas, and Mindanao to make the NPC more accessible to stakeholders across the country.
Privacy Commissioner Barcena also underscored the importance of capacity building through the revival of the Data Privacy Competency Program, which aims to develop standardized training modules on privacy law and data protection for Data Protection Officers and the general public. The NPC is likewise strengthening its internal capabilities to address emerging concerns involving artificial intelligence, algorithmic systems, and digital governance.
Privacy Commissioner Barcena further committed to ensuring that the NPC remains consistent, transparent, and timely in issuing guidance and decisions that will help both public and private sector stakeholders in navigating evolving privacy and technology issues.
“The NPC’s role was to bring a regulator’s perspective into highly technical conversations: that privacy should not be treated as an afterthought, but as something designed into digital systems from the beginning,” he stated.
Digital Bayanihan: Nurturing Privacy Consciousness in the Age of AI
The conference gathered leaders and experts from government, industry, civil society, and the international privacy community for a series of panel discussions on AI governance, digital safety, and responsible innovation.
Participating organizations and institutions included representatives from the Asia-Pacific privacy community, Future of Privacy Forum, Ayala Healthcare Holdings, Inc., Shopee, Analytics & Artificial Intelligence Association of the Philippines, Centre for Information Policy Leadership, Tech for Good Institute, TikTok, Mynt, Inc. (GCash), Meta, Roblox, Council for the Welfare of Children, Quisumbing Torres, the Department of Economy, Planning, and Development, UNESCO, and the NPC.
10 for 10: The PAW Awards 2026
The PAW Awards 2026, hosted by Deputy Privacy Commissioner Jose Sutton Belarmino II, recognized exemplary organizations and individuals who demonstrated excellence in privacy protection and data governance.
Mynt, Inc. bagged four awards including Privacy Innovation Award, Privacy Initiative of the Year, Privacy Management Program of the Year. Its DPO, J.R. Robert Real, Jr., was also named as the Data Protection Officer of the Year.
Converge ICT Solutions received the Kabataang Digital Award, while City Government of Muntinlupa was honored with the Public Sector Excellence Award. Credit Information Corporation received the Outstanding Technology Implementation for Data Protection Award.
Atty. Kristine Tendencia-Bartolome of the Philippine Statistics Authority was recognized as the Privacy Advocate of the Year. The NPC Seal of Registration Compliance Excellence Award was conferred upon SM Retail, Inc. for private sector category and to the Philippine Statistics Authority for public sector category.
As the NPC enters its second decade, the Privacy Commissioner Barcena reaffirmed the NPC’s commitment to building a privacy-conscious nation, strengthening public trust in digital systems, and ensuring that innovation and emerging technologies remain grounded in accountability, human rights, and responsible data governance.
For more information, visit www.privacy.gov.ph.