Encryption Law by Country
Where strong encryption is a right, restricted, or compelled. National law and policy, mirrored per country.
Source: Global Partners Digital, World Map of Encryption, updated 2026-07-02. Full data at www.gp-digital.org/world-map-of-encryption
Encryption Law by Country (196)
General right to encryption
No known legislation or policies.
Mandatory minimum or maximum encryption strength
Section 23 of the Data Privacy Act of 2012 requires government agencies to ensure that “any technology used to store, transport or access sensitive personal information for purposes of off-site access approved under this subsection shall be secured by the use of the most secure encryption standard recognized by the (National Privacy) Commission”. A copy of the Data Privacy Act of 2012 can be found here . In its NPC Circular 16-01 – Security of Personal Data in Government Agencies, the Commission has stated that “personal data that are digitally processed must be encrypted, whether at rest or in transit” and recommends “Advanced Encryption Standard with a key size of 256 bits (AES-256) as the most appropriate encryption standard”. A copy of the Circular can be found here .
Licensing/registration requirements
No known legislation or policies.
Import/export controls
No known legislation or policies.
Other restrictions
No known legislation or policies.
Obligations on individuals to assist authorities
No known legislation or policies.
Obligations on providers to assist authorities
No known legislation or policies.
Assessment Text Area
There are no restrictions on the use of encryption in the Philippines. There are minimum advanced encryption standards set for personal data kept by government agencies.
Murphy's Law