Free · ten minutes
How ready are you for Data Privacy Act compliance?
Answer fifteen questions on the requirements of Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations and NPC issuances, in four steps. Your readiness report, with your score for each area and your priority actions, is sent to your e-mail.
Standard: Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations and NPC issuancesChoose a different standard
Keep exploring
More quick readiness checks
What the Philippine Data Privacy Act readiness check covers
The check measures your organisation against Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations and NPC issuances in fifteen questions, grouped into four areas: Accountability, registration and governance; Principles, lawful processing and notices; Security measures and breach management; and People, monitoring and review. Each answer is scored and weighted; the questions marked “Double weight” are the ones the National Privacy Commission examine first.
What you get
An overall score with one of four readings — Well prepared, Nearly there, Gaps to close or Starting out — a score for each of the four areas, the priorities to fix first and the typical next step towards Data Privacy Act compliance.
How to use it
Answer from evidence rather than intention: if a control exists on paper but is not operating, score it as not operating. Share the result with the people who own each area, and use the Philippine Data Privacy Act hub for the requirements, the route to Data Privacy Act compliance and what it costs.
Questions people ask
Is the Philippine Data Privacy Act readiness check free?
Yes. It is free, takes about ten minutes and sends your readiness report to your e-mail, with no obligation.
Is this an NPC compliance check or a certificate?
No. It is a self-assessment that shows where you stand before the real thing. There is no Data Privacy Act certificate. Compliance is demonstrated to the National Privacy Commission and clients through registration, documentation and the evidence that your measures operate; ISO/IEC 27701 certification can evidence the system behind it. Sterling's expert and experienced consultants build and evidence the programme; Sterling does not certify compliance.
What happens after I receive my Philippine Data Privacy Act score?
Your report shows the areas to fix first and the typical next step towards Data Privacy Act compliance. If you want help with the result, a Sterling consultant can walk through it with you in a free discovery call.