Investigating Data Privacy Awareness and Implementation in Philippine SMEs

This study investigates the level of awareness and implementation of privacy and data protection measures among Small and Medium-sized Enterprises (SMEs) in the Philippines following the Data Privacy Act 2012 (Republic Act No. 10173). Due to limitations, a qualitative approach was utilized, focusing on detailed case studies and in-depth interviews with 10 SMEs from various sectors. The study aims to provide comprehensive insights into these organizations' privacy practices, challenges, and strategies. The findings reveal varying degrees of understanding and implementation, influenced by organizational size, industry type, and resource availability. Significantly, gaps in awareness and execution are identified, underscoring the need for targeted training and policy interventions. Although the small sample size limits the generalizability of the results, the study offers valuable recommendations for enhancing data protection efforts within the Philippine SME sector. It lays the groundwork for future research with larger sample sizes.