CyberLaw
CyberLaw Philippines

Philippine cyberlaw, in one place.

CyberLaw Philippines compiles the laws that govern the internet in the Philippines, together with notes and guides on applying them, in a single free PDF for law and ICT students and practitioners.

19+Laws and rules
1PDF, all in one
FreeTo download and share
YearlyUpdated each year
Why it matters

People need to know about laws.

You cannot protect your data, your accounts, your business or your family online if you do not know what the law says.

Not knowing a law is not a defense. Posting, sharing and recording can break the law without you realizing it.

Victims who know their rights can report faster and keep the right evidence.

About us

Why we made the codal.

Philippine cyberlaw is spread across many statutes, court rules, executive orders and agency circulars. Some were passed before social media existed. Others were issued this year. Finding the right provision takes time, and most people do not know where to start.

CyberLaw Philippines brings these sources together in one document. Each law comes with notes and guides on how to apply it in the ICT space.

We are an organization of people who study and work in law and technology. We keep the codal free so that anyone can read the law that applies to them.

Compile

We collect cyberlaws, rules and related issuances and keep one clean copy.

Annotate

We add notes and guides so each law is read with how it applies in practice.

Share

We publish the codal free of charge and update it every year.

What is inside

Laws covered.

A short summary of each entry. The PDF has the full text, notes and guides for every one.

01

Access Devices Regulation Act of 1998

Penalizes fraud involving credit cards, debit cards and other access devices. The 2019 amendment widened the devices and acts covered and raised penalties.

R.A. 8484, as amended by R.A. 11449 · Finance
02

Electronic Commerce Act

Gives legal effect to electronic documents, signatures and contracts, and penalizes hacking and piracy.

R.A. 8792 · Commerce
03

Rules on Electronic Evidence

Court rules on how electronic documents, electronic signatures and digital records are presented and admitted as evidence.

A.M. No. 01-7-01-SC · Procedure
04

Optical Media Act of 2003

Regulates the making, import and sale of optical discs to curb piracy, and created the Optical Media Board.

R.A. 9239 · Commerce
05

Joint DTI-DOH-DA Administrative Order

Joint rules of the Department of Trade and Industry, Department of Health and Department of Agriculture for consumer protection in online transactions.

No. 01, Series of 2008 · Commerce
06

Anti-Camcording Act of 2010

Prohibits recording films in cinemas without the consent of the copyright owner.

R.A. 10088 · Crime
07

Data Privacy Act of 2012, with IRR, and Rules on AI Processing Systems Data

Protects personal information, sets the rights of data subjects and the duties of those who handle data, and created the National Privacy Commission. Includes the rules on data processed by AI systems.

R.A. 10173 · Data
08

Cybercrime Prevention Act of 2012

Defines offenses such as illegal access, data interference, computer-related fraud, identity theft and online libel. Parts were struck down in Disini.

R.A. 10175 · Crime
09

Department of Information and Communications Technology Act of 2015

Created the DICT and gave it the lead on national ICT policy, infrastructure and cybersecurity.

R.A. 10844 · Government
10

Freedom of Information (FOI) Order

Gives the public access to information held by the executive branch, subject to stated exceptions.

E.O. No. 6, s. 2016 · Government
11

Philippine Digital Workforce Competitiveness Act

Supports the training and development of Filipino workers for digital and ICT jobs.

R.A. 11927 · Government
12

Anti-OSAEC and Anti-CSAEM Act

Targets online sexual abuse and exploitation of children and sets duties for platforms, payment services and other intermediaries.

R.A. 11930 · Safety
13

Subscriber Identity Module (SIM) Registration Act, with IRR

Requires SIM registration with valid ID to deter scams, with rules on how registrants' data is protected.

R.A. 11934 · Data
14

Internet Transactions Act of 2023

Sets rules for online merchants and platforms and created the E-Commerce Bureau under the DTI.

R.A. 11967 · Commerce
15

Anti-Financial Account Scamming Act (AFASA)

Penalizes money muling and social engineering schemes used to take over or abuse financial accounts.

R.A. 12010 · Finance
16

Rules of Procedure on Inquiry into Financial Accounts under AFASA

Sets how the Bangko Sentral ng Pilipinas conducts inquiries into financial accounts and shares account information under AFASA.

BSP Circular No. 1214, s. 2025 · Finance
17

Konektadong Pinoy Act

Opens up the data transmission industry to more players to expand internet connectivity.

R.A. 12234 · Infrastructure
18

E-Governance Act

Sets the framework for digital government services and the use of ICT in public offices.

R.A. 12254 · Government
19

Data Residency Framework Order

Sets the framework on where data is stored and processed, known as data residency.

E.O. No. 119, s. 2026 · Data

And more. The full list is in the PDF.

Jurisprudence

Decisions that shape the law.

Three Supreme Court cases you will meet often when reading Philippine cyberlaw.

G.R. No. 203335 · Feb. 11, 2014

Disini v. Secretary of Justice

The main challenge to the Cybercrime Prevention Act. The Court upheld most of the law and struck down a few provisions, including the power to take down content without a court order and real-time collection of traffic data without a warrant.

Read it to understand what the Cybercrime Act can and cannot do.

G.R. No. 202666 · Sept. 29, 2014

Vivares v. St. Theresa's College

Students sued after their private Facebook photos were used for school discipline. The Court held that a person's expectation of privacy online depends on the privacy settings and the audience they chose.

Read it for privacy on social media and the writ of habeas data.

G.R. No. 182835 · Apr. 20, 2010

Ang v. Court of Appeals

A man sent a woman a picture of her face attached to a nude body by text message. The Court held this was psychological violence under the Anti-Violence Against Women and Their Children Act.

Read it for how older laws reach online conduct.

Practical guide

Where to report.

Common situations, the law that usually applies, and the office to approach first.

My personal data was leaked or misused

Law
Data Privacy Act (R.A. 10173)
Go to
The organization's Data Protection Officer first, then the National Privacy Commission.

Someone is harassing, threatening or exploiting me online

Law
Cybercrime Prevention Act (R.A. 10175). Where a child is involved, also R.A. 11930.
Go to
PNP Anti-Cybercrime Group, NBI Cybercrime Division, or the DOJ Office of Cybercrime.

I was scammed through a link, text or fake account

Law
Cybercrime Prevention Act (R.A. 10175), Anti-Financial Account Scamming Act (R.A. 12010)
Go to
Your bank or e-wallet right away, then PNP Anti-Cybercrime Group or NBI. The BSP takes complaints about regulated financial institutions.

An online seller took my money

Law
Internet Transactions Act (R.A. 11967), Electronic Commerce Act (R.A. 8792)
Go to
The platform's dispute process, then the DTI.

Keep screenshots, links, usernames, receipts and dates before anything is deleted. Offices and procedures change, so confirm current contact details on each agency's official website. This guide is general information and not legal advice.

Who it is for

Built for people who work with the law.

Law students

One reference for cyberlaw and data privacy subjects, moot court and thesis research.

Lawyers

A fast way to check the governing statute and procedural rules before advising a client.

ICT students

Plain explanations of the legal duties that come with building and running systems.

ICT practitioners

Guidance on privacy compliance, data handling and digital evidence.

How to use it
01

Read.

Start with the short summary of each law.

02

Understand.

Use the notes to see what is allowed and what is not.

03

Apply.

Use the guides to handle a real situation or prepare your argument.

FAQ

Questions.

Philippine cyberlaws and related rules, from the Access Devices Regulation Act to the E-Governance Act and the Data Residency Framework Order, with notes and guides on applying them in the ICT space. The PDF has more than the list on this page.

Yes. You can download it, print it and share it with others.

No. The codal is for learning and reference. For a real case, talk to a lawyer.

Law students and lawyers, and ICT students and practitioners. Anyone who wants to understand the law online can use it too.

Each edition is checked against official sources when it is published. Laws and rules change, so always confirm the official text before relying on it.

Yes. Our organization commits to a yearly update. The edition year is shown in the footer.

Yes. Share the PDF freely and credit CyberLaw Philippines. For formal legal writing, cite the official source of the law.

Message our official Facebook page. Include the law, the page number and the correct source if you have it.

Download

Take the whole codal.

Compiled by CyberLaw Philippines for learning. Not legal advice. Always check the official text of a law before relying on it.

Get involved

Help us keep it accurate.

Found an error, a missing law, or a new issuance? Message us on our official Facebook page. Each yearly update is built on reader feedback.

Visit our Facebook page