Pilippines registration
PUBLIC
The Philippines Data Processing Systems and
Data Protection Officers Registration
July 2, 2024
The information contained in this document is for general informational purposes only and is provided on the
understanding that SAP is not engaged in rendering legal advice. The responsibility to adopt appropriate
measures to meet the requirements set forth by the Philippines’ Data Privacy Act of 2012 rests with each business.
SAP accepts no liability for any actions taken as a response to this resource. As such it should not be used as a
substitute for legal or professional consultation.
The Philippine National Privacy Commission's (NPC) Circular No. 2022-04 (the Circular), issued
on December 5, 2022, provides guidelines for data processing system (DPS) registration,
The Philippines Data Processing Systems and
Data Protection Officers Registration
July 2, 2024
The information contained in this document is for general informational purposes only and is provided on the
understanding that SAP is not engaged in rendering legal advice. The responsibility to adopt appropriate
measures to meet the requirements set forth by the Philippines’ Data Privacy Act of 2012 rests with each business.
SAP accepts no liability for any actions taken as a response to this resource. As such it should not be used as a
substitute for legal or professional consultation.
The Philippine National Privacy Commission's (NPC) Circular No. 2022-04 (the Circular), issued
on December 5, 2022, provides guidelines for data processing system (DPS) registration,
notification regarding automated decision-making or profiling, and the designation of data
protection officers (DPO).
Introduction
To facilitate compliance with registration requirements, the NPC launched its NPC Registration System (NPCRS) on
February 3, 2023. This platform is the only method for controllers and processors to fulfill their legal obligation to
register or update information on DPOs and data processing systems. If requirements for mandatory registration
are met, personal DPS and DPOs must be registered through the NPCRS. Failure to comply with the registration
requirements may result in compliance and enforcement orders, cease and desist orders, bans on data processing,
or payment of administrative fines.
SAP Philippine Entities’ Registrations
SAP Philippines, Concur Philippines, and SuccessFactors Philippines (individually, an SAP Philippine Entity or,
collectively, SAP Philippines Entities), have all secured NPCRS registration and are committed to maintaining
compliance through annual registration renewal. Each SAP Philippine Entity has received the following registrations
from the NPC:
1. Certificate of Registration (COR) verifies that each SAP Philippine Entity has successfully registered and
complied with the Data Privacy Act of 2012 (DPA) demonstrating our commitment for the current year.
2. Seal of Registration (SOR): This seal provides key details about the registration of each SAP Philippine
Entity, such as the presence of dedicated Data Protection Officers for each entity. It also features a unique
QR code for convenient online verification of the registration status of the SAP Philippine Entities.
[Note: The above seals are valid for the periods stated therein.]
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 2 / 3
protection officers (DPO).
Introduction
To facilitate compliance with registration requirements, the NPC launched its NPC Registration System (NPCRS) on
February 3, 2023. This platform is the only method for controllers and processors to fulfill their legal obligation to
register or update information on DPOs and data processing systems. If requirements for mandatory registration
are met, personal DPS and DPOs must be registered through the NPCRS. Failure to comply with the registration
requirements may result in compliance and enforcement orders, cease and desist orders, bans on data processing,
or payment of administrative fines.
SAP Philippine Entities’ Registrations
SAP Philippines, Concur Philippines, and SuccessFactors Philippines (individually, an SAP Philippine Entity or,
collectively, SAP Philippines Entities), have all secured NPCRS registration and are committed to maintaining
compliance through annual registration renewal. Each SAP Philippine Entity has received the following registrations
from the NPC:
1. Certificate of Registration (COR) verifies that each SAP Philippine Entity has successfully registered and
complied with the Data Privacy Act of 2012 (DPA) demonstrating our commitment for the current year.
2. Seal of Registration (SOR): This seal provides key details about the registration of each SAP Philippine
Entity, such as the presence of dedicated Data Protection Officers for each entity. It also features a unique
QR code for convenient online verification of the registration status of the SAP Philippine Entities.
[Note: The above seals are valid for the periods stated therein.]
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 2 / 3
Our commitment to compliance with local registration requirements is further emphasized by the prominent
display of our registration, both physically at our office entrance and online on our website.
For more information on how SAP demonstrates its commitment to data protection and privacy, please refer to
the resources in the SAP Trust Center (Data processing at SAP) - Data Protection and Privacy | SAP Trust
Center.
You can also visit www.sap.com.
display of our registration, both physically at our office entrance and online on our website.
For more information on how SAP demonstrates its commitment to data protection and privacy, please refer to
the resources in the SAP Trust Center (Data processing at SAP) - Data Protection and Privacy | SAP Trust
Center.
You can also visit www.sap.com.