When a technician in the Philippines touches a client's data, three layers of rules apply: Philippine law, your home-country privacy law, and your contracts. This guide explains what the Philippine Data Privacy Act exempts, what it still requires, and what Australian and Canadian guidance expects from the MSP that sends the work offshore.