Per Philippines Data Privacy Act of 2012 (RA 10173) + Implementing Rules and Regulations (IRR) + NPC Issuances: scope + lawful basis + principles. Requirements include (a) determine scope including extraterritorial application + sectoral coverage (BPO + KPO + government agencies + health + research) + (b) apply General Data Privacy Principles - transparency + legitimate purpose + proportionality per Section 11 RA 10173 + (c) establish Criteria for Lawful Processing of Personal Information per Section 12 + (d) implement Sensitive Personal Information and Privileged Information stricter handling per Section 13 + (e) document applicability assessment + lawful basis + (f) maintain alignment with National Privacy Commission (NPC) issuances.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.