The Philippines Senate has ratified the bicameral conference committee report on the Data Privacy Act, which mandates public and private entities to protect and preserve the integrity, security and confidentiality of personal data collected in its operations. The Senate approved the Data Privacy Act under Senate Bill No. 2965, underscoring the importance of requiring both the public and private institutions to comply with international data security standards. Based on the EU Data Protection Directive 95/46/EC, the act would also establish a National Privacy Commission to implement and enforce the bill’s provisions. Journalists have criticized portions of the legislation because of strong penalties around “leaked” information. Once passed into law, the bill adhering to rigorous international principles and standards will attract investors in the Information Technology and Business Process Outsourcing (IT-BPO) industry in the Philippines.