On August 13–14, 2026, the House of Representatives approved on third and final reading House Bill No. 9605, the National Cybersecurity and Critical Information Infrastructure Protection Act, to strengthen the Philippines’ defenses against escalating cyber threats. Lawmakers in Manila backed the measure to create a national cybersecurity framework, enhance protection for critical information infrastructure, and establish clearer incident reporting and penalties. The approval marks a key legislative step toward institutionalizing standards, coordinating government response, and reducing risks to government, private sector, and citizen data nationwide.
The bill’s passage responds to rising ransomware, state-linked attacks, and high-profile breaches that have targeted Philippine firms and services, signaling tighter regulation for ISPs, utilities, and financial institutions. Under the proposed law, agencies would coordinate threat intelligence, mandate security baselines, and require breach notifications, affecting compliance costs and operational practices for businesses. Cybersecurity providers may see increased demand while consumers could benefit from stronger safeguards and faster incident response. Stakeholders now awaitSenate actionand implementation rules that will determine timelines, enforcement mechanisms, and support for small businesses to meet new obligations.
