Free tool

Do we need to register with the National Privacy Commission?

Registration is mandatory if any one of four triggers applies. The second and fourth catch far more small organizations than people expect — a 25-person clinic, a 40-person lending company, a school with 1,200 students and a 15-person HR outsourcing firm are all almost certainly caught.

Four questions

Any single yes makes registration with the National Privacy Commission mandatory. They are alternatives, not a checklist you have to complete.

How many people do you employ?

Do you employ 250 or more people?

Count everyone on the payroll, across all sites.

Do you process the sensitive personal information of 1,000 or more individuals?

Sensitive personal information includes health, education, genetic, sexual life, government-issued identifiers, and information about offenses. Patients, students, borrowers and employees all count.

Is your processing likely to pose a risk to the rights and freedoms of data subjects?

Large-scale monitoring, processing of vulnerable groups, or data whose exposure could cause real harm.

Do you operate any automated decision-making or profiling system?

Automated credit scoring, algorithmic screening, behavioral profiling, or any system that makes a decision about a person without a human in the loop.

Nexthread Solutions is an information technology solutions provider for both hardware and software needs. Current as of July 27, 2026. Reviewed quarterly, and on each new NPC issuance.