Sen. Bam Aquino is pushing for a National Cybersecurity Agency (NCSA) to help protect government computer systems and personal information from hackers, while the National Privacy Commission (NPC) reviews data breach reports from 10 government agencies.
His proposal, Senate Bill No. 2248, aims to create an agency that would lead the country’s efforts to prevent and respond to cyberattacks. The proposed National Cybersecurity and Critical Information Infrastructure Protection Act was filed on June 3, 2026.
“Today, hacking and data leaks put more than personal information at risk. People’s hard-earned savings and livelihoods could also be endangered when their data is used in online scams,” Aquino said in Tagalog.
The proposed agency would set cybersecurity standards and help government offices and private companies work together to prevent attacks and respond when they happen. It would also provide data security training to help businesses protect their records from hackers.
Under the bill, government agencies, government-owned and controlled corporations, and local governments would have to meet minimum security requirements for their computer systems and online services. Operators of critical information infrastructure would need to regularly check their systems for weaknesses, monitor for threats, submit audit reports, and quickly report serious cybersecurity incidents.
The effort comes as the NPC looks into personal data breach reports from 10 government agencies. These include the Bureau of Internal Revenue, Department of Information and Communications Technology, and Securities and Exchange Commission.
In its Nov. 10 statement, the NPC did not say how many people were affected or what personal information was involved. It is reviewing what happened, the possible harm to affected people, and what each agency has done to address the incident.
The NPC said reporting a breach is only one part of an agency’s responsibility. Agencies must also fix security weaknesses, take steps to protect affected people, and notify them when required. Hiring an outside company to handle personal information does not remove an agency’s responsibility to keep that information safe.
The commission also reminded the public to be careful with unexpected messages, unfamiliar links, and requests for personal information. Scammers may use concerns about data breaches to trick people into sharing sensitive details.
“As technology continues to develop, we must also strengthen protection for every Filipino’s personal information and hard-earned money,” Aquino said in Filipino.