The Konektadong Pinoy Act, Republic Act No. 12234, establishes an open access framework for the Philippine data transmission sector. It creates opportunities for qualified participants across network segments while imposing requirements for registration, security, service quality, and market conduct.
Businesses should assess the services they actually intend to provide before selecting an entry route.[1]
For an investor, community connectivity provider, or existing operator, the central questions are which segment the business will serve, what authority it needs, and whether its systems and finances can support the promised service.
This guide sets out seven compliance steps under the Konektadong Pinoy Act. It covers the planning decisions, applications, commercial agreements, and operating arrangements to review before launch, as well as the responsibilities that continue after registration or authorization.
Understanding the Konektadong Pinoy Act
A proposed connectivity project should explain who will provide the service, which customers will receive it, and how the network will reach them. Begin with the actual business model. Owning infrastructure, purchasing upstream capacity, and selling connectivity to end-users involve different arrangements and dependencies.
The Konektadong Pinoy Act should be read with its implementing rules, current NTC and DICT issuances, and the conditions of the relevant certificate. A business plan should identify which requirements have been confirmed and which need clarification before money is committed.
Read the Konektadong Pinoy Act together with the documents applicable to the proposed network segment. Use the following steps to organize the legal review and assign responsibility for the work needed to support an application and launch.
1. Define the service and the network segment
The law covers data transmission industry participants (DTIPs), including relevant operations of public telecommunications entities, value-added service providers, and satellite systems providers or operators.
Data transmission includes Voice over Internet Protocol (VoIP) services but excludes basic telephone services. The identified network segments include international gateway facilities, core or backbone networks, middle mile, and last mile. Different roles can carry different requirements.[2]
Begin with a service and network description. Identify the customers, service area, facilities owned or leased, upstream connections, and any use of radio frequencies.
Distinguish providing data transmission services from owning or leasing passive infrastructure, such as towers or ducts. Passive infrastructure owners remain subject to applicable sharing obligations, and an infrastructure owner that also provides data transmission services must assess the requirements for both roles.[3]
For a Konektadong Pinoy Act project, prepare a diagram of the proposed commercial and network relationships. Identify the operator, infrastructure owners, capacity suppliers, and customer-facing entity. Keep that description consistent across the application, access agreements, financial assumptions, and proposed service terms.
Describe which facilities already exist and which must be acquired, leased, or constructed. Record dependencies on third-party capacity and access. An agreement under negotiation should be identified as such, especially where the business cannot deliver its proposed coverage without it.
If the business plans to operate across several network segments, identify the activities in each segment. Do not assume that a description suitable for one role resolves the application or operating requirements for another. Have the legal and technical teams review the same proposed scope.
2. Match the application to Konektadong Pinoy Act requirements
Under the implementing rules, the National Telecommunications Commission (NTC) issues a Certificate of Registration for qualifying last mile or middle mile participation and a Certificate of Authorization for international gateway or core or backbone operation.
Spectrum use must also comply with the NTC’s authorization and frequency assignment or access requirements. Prepare against the current NTC eligibility rules and documentary checklist.[4]
| Proposed role | Regulatory question | Planning evidence |
| Last mile or middle mile | What registration covers the intended service? | Service area and network plan |
| Gateway or backbone | What authorization covers the proposed network? | Route and rollout plan |
| Wireless operation | What spectrum authority is required? | Frequencies and equipment information |
| Infrastructure access | What access rights and terms are needed? | Facility and capacity agreements |
Eligibility assessment includes legal organization, technical feasibility, financial capacity, and a commitment to comply. A project should be able to substantiate its network design, funding, and operational arrangements. Foreign participation also requires review under the Foreign Investments Act, Public Service Act, and relevant national security rules.[5]
For example, a small provider planning to serve a municipality should examine its upstream capacity and access arrangements before marketing connection speeds or coverage. The application, business plan, and customer commitments should describe a service that the proposed network can support.
Company registration and authority under the Konektadong Pinoy Act address different questions. Confirm the applicant, the activities covered by the proposed certificate, and any additional approvals needed for the actual project. Align the entity documents with the business that will operate and contract with customers.
When preparing a Konektadong Pinoy Act application, identify the evidence needed to support the technical and financial submissions. Check current requirements for the relevant segment rather than adopting assumptions from another operator or an older checklist. Allocate responsibility for obtaining documents and answering regulatory queries.
Keep a record of the application, supporting studies, agency correspondence, and final certificate conditions. Before accepting customer commitments, check that the proposed service and service area fall within the authority obtained and that any necessary upstream and infrastructure arrangements are ready.
ATL Law Firm’s corporate practice assists with market entry assessments and commercial agreements. An ownership or investment arrangement should be reviewed alongside the proposed network activity and the permissions needed to carry it out.
3. Plan cybersecurity under the Konektadong Pinoy Act
Cybersecurity compliance begins upon registration or authorization. New DTIPs must secure the prescribed certification within two years from registration or authorization. The Department of Information and Communications Technology (DICT) oversees standards and audits.
Under the implementing rules, DICT determines the appropriate route for the participant’s risk profile: third-party certification based on prevailing ISO information security standards or a certificate of compliance from the DICT Cybersecurity Bureau.[6]
Plan security from the start. Assign responsibility for access management, incident escalation, supplier security, backup, and recovery. Record the systems supporting service delivery and who may change their configurations. Outsourcing contracts should require practical assistance during outages and security incidents.
For Konektadong Pinoy Act compliance, prepare a practical security work plan covering the systems used to deliver and support the service. Identify the persons responsible, the work still required, and the evidence that will be retained for assessment or audit.
Review supplier responsibilities before signing hosting, maintenance, or managed-service agreements. Identify who can access the systems, approve changes, investigate an incident, and restore service. Set workable notification and assistance obligations so that the operator can respond when something fails.
Include certification preparation and continuing security work in the launch budget. Keep records of assessments, corrective actions, and changes affecting the security arrangements. The timetable for obtaining the required certification should be monitored alongside the obligations already applicable to the business.
4. Protect customer and employee information
The certification period does not suspend security duties. Handle customer and employee information under the Data Privacy Act, including appropriate safeguards and accountability for outsourced processing.[7]
The Konektadong Pinoy Act and the Data Privacy Act should be considered together when designing customer onboarding, billing, technical support, and complaints handling. Map the personal information collected, the reason it is used, the people who can access it, and the service providers involved.
Review the information requested from customers and staff. Prepare appropriate notices and internal instructions, and identify who handles privacy inquiries. Customer service teams should know how to escalate a privacy concern without unnecessarily circulating identification documents, account details, or other personal information.
For outsourced functions, define the parties’ responsibilities for security, access, incident assistance, retention, and return or deletion of information. Check that the contractual promises can be performed in practice and that they reflect how the service provider will actually handle the data.
ATL Law Firm’s data privacy services can support the review of customer-facing documents and outsourcing arrangements. For a Konektadong Pinoy Act project, the privacy review should be coordinated with network operations and customer support before launch.
5. Review network access and competitive conduct
Access providers must make infrastructure and services on the applicable access list available on open, fair, reasonable, and nondiscriminatory terms, subject to technical feasibility and other governing conditions. Review the published Reference Access Offer, pricing, and dispute procedures before relying on another operator’s facilities.[8]
Review exclusivity, information exchange, pricing coordination, and arrangements between related businesses for competition concerns. The Philippine Competition Act remains relevant to agreements and conduct in this market.[9] Commercial coordination should have a defined legitimate purpose and appropriate limits.
Under the Konektadong Pinoy Act, assess the access arrangement against the facilities and capacity the business actually needs. Confirm the scope of access, available capacity, service levels, installation work, commercial charges, and the process for handling faults or proposed changes.
Review the consequences of suspension or termination before relying on another operator’s facilities. Identify notice requirements, dispute procedures, and any arrangements needed to maintain service during a transition. A business should understand the dependencies behind the customer commitments it intends to make.
An access agreement under the Konektadong Pinoy Act should also allocate responsibility for confidential information and technical cooperation. Define what information must be exchanged to perform the arrangement and who may receive it. Review broader information-sharing or exclusivity provisions for competition concerns.
Keep a record of the commercial basis for the arrangement and any unresolved access issues. Where the parties cannot agree, assess the available regulatory and dispute procedures before assuming that the proposed access can be obtained on a particular timetable or price.
6. Make customer terms and complaints workable
Customer terms and advertising should explain the service accurately, including speeds, latency, data caps, reliability commitments, and all charges. Provide a plain-language service-plan summary and a free, accessible complaints mechanism.
The implementing rules require at least two independent complaint channels, including one available at all times, and acknowledgment within 24 hours.
Resolution periods depend on the type and complexity of the complaint. Keep the required complaint records and submit the prescribed reports.
The complaint periods under the implementing rules include the following requirements.[10]
| Complaint stage or category | Required period or condition |
| Acknowledgment of any complaint | Within 24 hours of receipt, with a unique reference number |
| Billing disputes up to PHP1,000 or service inquiries verifiable without network testing | Within 7 days from acknowledgment |
| Other complaints, including service quality, repeated outages, or termination disputes | Within 15 days from acknowledgment |
| Complex complaints unresolved within 15 days for reasons outside the provider’s reasonable control | Written explanation and a firm completion date no later than 30 days from acknowledgment |
For Konektadong Pinoy Act compliance, give customer support a clear process for recording complaints, issuing acknowledgments, classifying issues, and monitoring deadlines. The staff member receiving a complaint should know who can investigate it and who can approve the response or corrective action.
Check the service-plan summary, standard contract, advertisements, and actual billing arrangements against one another. Explain recurring and one-time charges, service limitations, and the process for raising concerns. Avoid offering speeds, availability, or support arrangements that the proposed network and staffing cannot sustain.
Customer protection under the Konektadong Pinoy Act requires coordination between commercial, technical, and support teams. Test the complaint channels before launch and identify who monitors the channel available at all times. Keep customer notices and complaint records consistent with the actions actually taken.
7. Maintain continuing compliance and review transition rules
Before launch, assign responsibility for regulatory reports, fees, certificate conditions, and changes to the network or service area.
Existing operators that qualify under the transition rules need not separately register as DTIPs. Covered NTC certificates and satellite accreditations remain valid until expiry or revocation, while the Act’s applicable obligations continue to govern their data transmission services.
Where a rule creates a practical obstacle, a focused submission should explain the issue and the proposed solution without assuming an exemption.[11]
A Konektadong Pinoy Act compliance calendar should identify each obligation, its source, the person responsible, and the evidence of completion. Include the requirements relevant to registration or authorization, security assessments, regulatory reporting, customer complaints, and changes in the business or service.
Keep the current certificates and conditions accessible to the people making commercial and network decisions. Review the regulatory position before expanding to a new area, adding a service, changing the operating structure, or entering an arrangement that depends on a different network role.
For an existing operator, compare the current activities with the certificates and permissions held. A transition assessment under the Konektadong Pinoy Act should identify what continues, what obligations now apply, and which matters require confirmation from the relevant regulator.
Our policy advisory services can support focused legal and regulatory submissions. A useful submission should identify the particular requirement, the operational difficulty, the legal issue, and the decision or clarification being sought.
Documents to prepare for a Konektadong Pinoy Act project
The exact application and reporting requirements depend on the proposed activity and current agency rules. Assemble an initial project file so that the legal, technical, and financial teams can work from the same information and identify what is still missing.
- Entity and ownership records identifying the applicant, investors, and the persons authorized to act.
- A service description, network plan, proposed service area, and rollout assumptions.
- Available upstream capacity, infrastructure access, equipment, and supplier agreements.
- Technical and financial studies supporting the proposed application and service commitments.
- Existing certificates, approvals, relevant conditions, and regulatory correspondence.
- Cybersecurity responsibilities, privacy documents, and proposed outsourcing arrangements.
- Customer terms, service-plan summaries, complaint procedures, and a compliance calendar.
Record which documents are approved or signed, which remain in draft, and which depend on another party. Update the file when the scope changes so that an application, commercial agreement, or customer statement does not rely on an obsolete version of the project.
Frequently asked questions about the Konektadong Pinoy Act
Who does the Konektadong Pinoy Act cover
The framework covers DTIPs and applies to the relevant activities of telecommunications, value-added service, and satellite participants. Access providers and passive infrastructure businesses must also examine the provisions relevant to their roles. Classification should follow the services and facilities actually provided, rather than the business name or a broad description in marketing material.
Do I need a Certificate of Registration or Authorization
The appropriate route depends on the network segment. The implementing rules provide for registration for qualifying last mile and middle mile participation and authorization for international gateway or core or backbone operation. Spectrum use needs its own review. Confirm the current application requirements and the activities covered by the certificate.
Does company registration replace approval under the Konektadong Pinoy Act
Registering the business entity does not establish that it holds the authority needed for its proposed data transmission activity. Match the service, network segment, and service area to the relevant NTC requirements. Review any additional permissions or arrangements needed before presenting the business as ready to provide the service.
Can foreign investors participate in a connectivity project
Foreign participation requires review of the proposed structure and activity under the relevant investment, public service, and national security rules. The Konektadong Pinoy Act does not eliminate that review. Assess the applicant and its intended operations before finalizing ownership arrangements or treating a proposed investment as eligible for every required approval.
Does the certification deadline postpone cybersecurity duties
The Konektadong Pinoy Act framework requires cybersecurity compliance from registration or authorization. The period for securing the prescribed certification should be planned alongside those existing duties. Confirm the appropriate route with reference to the participant’s risk profile and the applicable DICT requirements, and retain evidence of the security work being performed.
What should an infrastructure access agreement address
An agreement under the Konektadong Pinoy Act should reflect the facilities and services required, charges, service commitments, security responsibilities, fault handling, termination, and dispute procedures. Read the applicable Reference Access Offer and assess technical feasibility. Do not assume that the statutory access framework settles every operational or commercial term of the proposed arrangement.
Do existing operators have to register again
Existing operators that qualify under the transition provisions need not separately register as DTIPs. Their current certificates, activities, and applicable conditions should still be reviewed against the Konektadong Pinoy Act framework. Transition treatment does not remove the continuing obligations relevant to their data transmission services.
Legal assistance under the Konektadong Pinoy Act
ATL Law Firm can assist with market entry assessment, review of access and customer agreements, and regulatory or policy submissions for connectivity projects.
Contact ATL Law Firm to discuss the proposed service, ownership structure, network segment, and stage of the project. Those details help identify the entry requirements and operating obligations that need attention before substantial commitments are made.
[1] Konektadong Pinoy Act, Republic Act No. 12234, §§ 2, 8–9, 12, 25 (2025) (Phil.).
[2] Republic Act No. 12234, §§ 3(h)–(i), 5 (2025) (Phil.).
[3] Implementing Rules and Regulations of the Konektadong Pinoy Act, rule I, § 2; rule VII, §§ 1–2; rule X, § 5(b)(iv) (Nov. 5, 2025) (Phil.) [hereinafter Konektadong Pinoy IRR].
[4] Republic Act No. 12234, § 8 (2025) (Phil.); Konektadong Pinoy IRR, rule III, §§ 1(c)–(f), 2(d).
[5] Republic Act No. 12234, § 8(a) (2025) (Phil.); Konektadong Pinoy IRR, rule III, § 2(a)–(c).
[6] Republic Act No. 12234, § 9 (2025) (Phil.); Konektadong Pinoy IRR, rule III, § 3(d); rule V, §§ 1–3.
[7] Data Privacy Act of 2012, Republic Act No. 10173, §§ 14, 20–21 (2012) (Phil.).
[8] Republic Act No. 12234, §§ 12–13 (2025) (Phil.); Konektadong Pinoy IRR, rule VI, §§ 1, 4–8.
[9] Philippine Competition Act, Republic Act No. 10667, §§ 14–15 (2015) (Phil.); Republic Act No. 12234, § 18 (2025) (Phil.).
[10] Republic Act No. 12234, §§ 20(c), 25 (2025) (Phil.); Konektadong Pinoy IRR, rule VIII, § 1(a)(i)–(iii), (g)(i)–(iv).
[11] Konektadong Pinoy IRR, rule III, §§ 3, 8; rule X, § 5(a)–(b).
Comments are closed