Philippines Cybercrime Prevention Act (RA 10175)
The Philippines Cybercrime Prevention Act of 2012 (RA 10175) with its 2015 Implementing Rules, as narrowed by the Supreme Court in Disini (2014): offences against data and systems, computer-related fraud, forgery and identity theft, and content offences an organisation must prevent, corporate liability up to PHP 10 million, and the duties of service providers to retain traffic and subscriber data for six months, preserve content data on order, keep orders confidential, disclose within 72 hours under a court warrant, assist warranted collection and searches, destroy data when periods end, report compliance to the DOJ Office of Cybercrime, and block, report and trace child sexual abuse material.
Philippines Cybercrime Prevention Act (RA 10175) is a compliance framework from Philippines with 3 domains and 16 controls that map to 85 other frameworks. The largest domains are Chapter IV and IRR Rule 7: Duties of service providers and persons holding computer data – Philippines Cybercrime Prevention Act (RA 10175) (8 controls), Chapter II: Punishable acts an organisation must prevent in its own conduct – Philippines Cybercrime Prevention Act (RA 10175) (5 controls), IRR Rule 7 Section 31: Service provider duties in child sexual abuse material cases – Philippines Cybercrime Prevention Act (RA 10175) (3 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (3)
Chapter II: Punishable acts an organisation must prevent in its own conduct – Philippines Cybercrime Prevention Act (RA 10175)
| Code | Title |
|---|---|
| philippines-cybercrime-prevention-act-ra-10175::IRR Sec. 4(A)(2) | IRR Sec. 4(A)(2) Limit on service provider monitoring of communications |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 4(a) | Sec. 4(a) Offences against the confidentiality, integrity and availability of data and systems |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 4(b) | Sec. 4(b) Computer-related forgery, fraud and identity theft |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 4(c) | Sec. 4(c) Content offences in the organisation's publishing and platforms |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 9 | Sec. 9 Corporate liability and supervision of those acting for the organisation |
Chapter IV and IRR Rule 7: Duties of service providers and persons holding computer data – Philippines Cybercrime Prevention Act (RA 10175)
| Code | Title |
|---|---|
| philippines-cybercrime-prevention-act-ra-10175::IRR Sec. 30(f) | IRR Sec. 30(f) Assistance with collection or interception of data under a court warrant |
| philippines-cybercrime-prevention-act-ra-10175::IRR Sec. 30(h) | IRR Sec. 30(h) Reporting compliance to the DOJ Office of Cybercrime |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 13(1) | Sec. 13(1) Retention of traffic data and subscriber information for six months |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 13(2) | Sec. 13(2) Preservation of content data on order, with extension and case-long hold |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 13(3) | Sec. 13(3) Confidentiality of preservation orders |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 14 | Sec. 14 Disclosure within 72 hours under a court warrant |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 15 | Sec. 15 Assisting a warranted search, seizure and examination |
| philippines-cybercrime-prevention-act-ra-10175::Sec. 17 | Sec. 17 Destruction of preserved data when the period ends |
IRR Rule 7 Section 31: Service provider duties in child sexual abuse material cases – Philippines Cybercrime Prevention Act (RA 10175)
| Code | Title |
|---|---|
| philippines-cybercrime-prevention-act-ra-10175::IRR Sec. 31(1) | IRR Sec. 31(1) Blocking and filtering child sexual abuse material |
| philippines-cybercrime-prevention-act-ra-10175::IRR Sec. 31(2) | IRR Sec. 31(2) Notifying law enforcement within seven days |
| philippines-cybercrime-prevention-act-ra-10175::IRR Sec. 31(3) | IRR Sec. 31(3) Furnishing user particulars and preserving access records |
Your Compliance Coverage
If you comply with Philippines Cybercrime Prevention Act (RA 10175), you already cover:
ISO/IEC 27031:2011
5%
1 controls mapped
Compare →W3C Verifiable Credentials (VC) Data Model 2.0
5%
1 controls mapped
Compare →Vietnam Law on Cybersecurity (No. 116/2025/QH15)
5%
1 controls mapped
Compare →+ 82 more: USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement) (5%), UK Bribery Act 2010 (5%)
See all 85 mapped frameworks ↓Maps to 85 other frameworks
Coverage is not the same as your position
This page shows what Philippines Cybercrime Prevention Act (RA 10175) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is Philippines Cybercrime Prevention Act (RA 10175) and who does it apply to?
Philippines Cybercrime Prevention Act (RA 10175) is a compliance framework from Philippines with 3 domains and 16 controls. The Philippines Cybercrime Prevention Act of 2012 (RA 10175) with its 2015 Implementing Rules, as narrowed by the Supreme Court in Disini (2014): offences against data and systems, computer-related fraud, forgery and identity theft, and content offences an organisation must prevent, corporate liability up to PHP 10 million, and the duties of service providers to retain traffic and subscriber data for six months, preserve content data on order, keep orders confidential, disclose within 72 hours under a court warrant, assist warranted collection and searches, destroy data when periods end, report compliance to the DOJ Office of Cybercrime, and block, report and trace child sexual abuse material. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Philippines Cybercrime Prevention Act (RA 10175) actually require?
Philippines Cybercrime Prevention Act (RA 10175) has 16 controls organised across 3 domains. The largest domains are Chapter IV and IRR Rule 7: Duties of service providers and persons holding computer data – Philippines Cybercrime Prevention Act (RA 10175) (8 controls), Chapter II: Punishable acts an organisation must prevent in its own conduct – Philippines Cybercrime Prevention Act (RA 10175) (5 controls), IRR Rule 7 Section 31: Service provider duties in child sexual abuse material cases – Philippines Cybercrime Prevention Act (RA 10175) (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Philippines Cybercrime Prevention Act (RA 10175) do I already cover?
Philippines Cybercrime Prevention Act (RA 10175) maps to 85 other compliance frameworks. The top mapping partners are ISO/IEC 27031:2011 (5% coverage), W3C Verifiable Credentials (VC) Data Model 2.0 (5% coverage), Vietnam Law on Cybersecurity (No. 116/2025/QH15) (5% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Philippines Cybercrime Prevention Act (RA 10175)?
Start your Philippines Cybercrime Prevention Act (RA 10175) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Philippines Cybercrime Prevention Act (RA 10175) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 16 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,121 frameworks.
Get Started Free →Free forever, no credit card required