The National Privacy Commission (NPC) has issued show-cause orders against Meta, Roblox, Reddit, and Discord over their alleged failure to comply with registration requirements under Philippine data privacy regulations.
The privacy regulator said the orders, issued on Tuesday, Sept. 22, were based on requirements under the Data Privacy Act of 2012 and NPC Circular 16-03.
The orders require the four digital platforms to explain their non-compliance and form part of a broader investigation into online services that process the personal information of users in the Philippines.
The NPC said it would examine whether digital platforms comply with rules covering registration, transparency, lawful data processing, data subject rights, accountability, and organizational, physical, and technical security measures.
The investigation places particular emphasis on platforms used by children and young people, whose personal information may be collected through social interaction, gaming, education, and other online activities.
“It is NPC’s position that the safety, privacy, and overall well-being of our youth must always come first. As learning and social interaction increasingly take place across both physical campuses and digital spaces, we are dedicated to protecting the privacy and data subject rights of our youth and promoting responsible data processing,” the commission said.
The NPC action came as Reddit and Discord separately faced a 24-hour deadline from the Cybercrime Investigation and Coordinating Center (CICC) to designate a resident agent or local representative in the Philippines.
In letters dated Sept. 21, the CICC said local representatives were needed to establish a clear channel for Philippine authorities seeking assistance from the platforms. The agency warned that failure to comply could result in restrictions on their operations or access in the country.
The CICC issued the directive following the Sept. 18 shooting at Banga National High School in South Cotabato, amid government concerns about violent extremist content and the exploitation of minors on digital platforms.
“We are not asking platforms to police the internet for the government but to be reachable, accountable, and responsive when activities on their platforms put Filipino children and communities at risk. When an online threat spills over into the real world, there has to be clear channel for authorities to act,” CICC spokesperson Renato Paraiso said.
The NPC’s show-cause orders and the CICC directive are separate actions. The privacy commission is examining compliance with data protection and registration rules, while the CICC is seeking local representatives to facilitate jurisdiction and coordination with law enforcement.
The NPC warned that it would take regulatory action against companies found to have violated data protection laws and regulations. It did not specify the possible sanctions or disclose the deadline given to the four platforms to respond.
“Protecting young people in the digital environment is a shared responsibility. Within its mandate, the NPC will continue to ensure that organizations processing personal data are held accountable and that the rights guaranteed to data subjects under Philippine data protection law are respected,” it said.
