The law governing data privacy in the Philippines is the Data Privacy Act of 2012 (DPA), which provides for the rights and obligations of the person whose personal information is processed, known as the “data subject.” As a rule, the data subject has the right to allow or restrict the collection, sharing, distribution and use of his personal information. The National Privacy Commission suspends compliance by businesses with the law until the issuance of the Implementing Rules and Regulations. As of this writing, the Commission has not yet been organized.