Corporate Code of Ethics (Philippines)

A Corporate Code of Ethics in the Philippines sets out the internal rules by which the company is run, governing the powers of directors and the rights of members.

A Corporate Code of Ethics in the Philippines establishes an effective corporate compliance program addressing multiple overlapping legal obligations: anti-bribery and anti-corruption standards under Republic Act No. 3019 (Anti-Graft and Corrupt Practices Act), the Revised Penal Code (RPC) provisions on corruption, and the United Nations Convention Against Corruption (UNCAC) to which the Philippines is a signatory; data privacy and data protection standards under Republic Act No. 10173 (Data Privacy Act of 2012) and the National Privacy Commission (NPC) rules; anti-money laundering compliance under Republic Act No. 9160 (Anti-Money Laundering Act, as amended by RA 10365, RA 11521, and RA 11659) and AMLC Regulatory Issuance A, Series of 2021; and anti-sexual harassment obligations under Republic Act No. 7877 (Anti-Sexual Harassment Act) and Republic Act No. 11313 (Safe Spaces Act).

For publicly listed companies (PLCs), the SEC Memorandum Circular No. 19, Series of 2016 requires the Board of Directors to approve and disclose a Code of Business Conduct and Ethics covering at minimum: compliance with laws and regulations; dealings with the corporation's assets and opportunities; confidentiality of information; dealing with conflicts of interest; and reporting violations. The Code must be reviewed annually and any material amendments must be disclosed to the SEC and the Philippine Stock Exchange (PSE) under the Revised Disclosure Rules (SEC MC No. 5, Series of 2020).

The Corporate Code of Ethics differs from a Company Handbook or Employee Manual in scope and authority: the Code of Ethics is a board-level governance document establishing principles, while the handbook implements operational procedures. The Code of Ethics also differs from a Conflict of Interest Policy (which addresses one specific ethical risk) and a Whistleblower Policy (which addresses one specific enforcement mechanism) — the Code of Ethics is the parent document that encompasses and authorizes these subsidiary policies.

For corporations covered by the AMLC's designated non-financial businesses and professions (DNFBPs) list under the 2021 Implementing Rules of the AMLA — including real estate developers, dealers in precious metals, lawyers, and accountants — the Code of Ethics must address AML and Counter-Terrorism Financing (CTF) compliance obligations specifically.

A Corporate Code of Ethics in the Philippines is needed whenever a corporation must establish formal ethical standards for its directors, officers, and employees.

A Corporate Code of Ethics is required for all publicly listed companies in the Philippines under SEC Memorandum Circular No. 19, Series of 2016 (Revised Code of Corporate Governance for Publicly-Listed Companies). The SEC requires annual submission of the Corporate Governance Report (SEC Form 17-CG or PSE GovScore) confirming that the Code of Ethics is in place, has been approved by the Board, and has been disseminated to all covered persons.

A Corporate Code of Ethics is needed when a Philippine corporation applies for or renews its government contracts under the Government Procurement Reform Act (Republic Act No. 9184) and the GPPB Implementing Rules, which require evidence of an anti-corruption compliance program for suppliers and contractors with government projects above the threshold value.

A Corporate Code of Ethics is required when a corporation under the Anti-Money Laundering Act (RA 9160 as amended) is covered as a reporting entity — banks, insurance companies, securities brokers, real estate developers, dealers in high-value goods — and must demonstrate to the AMLC that it has internal controls, an AML compliance program, and ethical conduct standards for employees handling covered transactions.

A Corporate Code of Ethics is needed when a corporation implements an ISO 37001 (Anti-Bribery Management System) or ISO 37301 (Compliance Management System) certification program, as both international standards require a documented ethics and anti-bribery policy approved at the highest governance level.

A Corporate Code of Ethics is required when a corporation enters into a business process outsourcing (BPO) contract with foreign principals who require proof of the Philippine company's ethics and data governance standards as a condition of the data processing agreement under the GDPR (for EU-based principals) or equivalent privacy regulations.

A Corporate Code of Ethics is needed when a family corporation or closely held corporation seeks listing on the SME Board of the Philippine Stock Exchange (PSE) or the Philippine Dealing and Exchange Corporation (PDEx), as governance standards require ethics documentation as part of the listing eligibility review.

A valid Corporate Code of Ethics for a Philippine corporation must contain the following elements to satisfy SEC governance requirements, labor law obligations, and anti-corruption compliance standards.

Preamble and Governing Principles: A statement of the corporation's commitment to ethical conduct, the legal and regulatory basis for the Code (citing RA 11232, SEC MC No. 19-2016, and other applicable laws), and the core values that guide the corporation's operations. The preamble establishes the tone at the top required by SEC corporate governance rules.

Scope of Coverage: Explicit identification of all persons bound by the Code — Board of Directors, executive officers, regular and contractual employees, consultants, agents, and third-party contractors who act on behalf of the corporation. Under Section 30 of RA 11232 (Revised Corporation Code), directors and officers owe a duty of loyalty to the corporation, and the Code implements this legal obligation.

Conflict of Interest Policy: Rules for identifying, disclosing, and managing actual, potential, and apparent conflicts of interest — including related-party transactions under SEC MC No. 19, Series of 2016, Section 4, and the Related Party Transaction (RPT) Policy required for PLCs. Directors must disclose conflicts before board votes under Section 31 of RA 11232.

Anti-Bribery and Anti-Corruption Standards: Specific prohibitions on giving or receiving bribes, kickbacks, facilitating payments, gifts above a stated threshold, and entertainment in connection with business — referencing RA 3019 (Anti-Graft and Corrupt Practices Act) for dealings with government officials and the Revised Penal Code (Articles 210-212 on bribery) for private-sector dealings. Include third-party intermediary due diligence requirements.

Data Privacy and Confidentiality: Obligations of covered persons under the Data Privacy Act (RA 10173) to protect personal data processed in the course of business, report data breaches to the National Privacy Commission (NPC) within 72 hours under NPC Circular No. 16-03, and maintain confidentiality of trade secrets and non-public information under the Securities Regulation Code (RA 8799) insider trading rules.

Anti-Money Laundering Compliance: Employee obligations under the AMLA (RA 9160 as amended by RA 10365) to report covered transactions (exceeding PHP 500,000 in a single day under Section 3(b)) and suspicious transactions to the AMLC through the Financial Intelligence Unit; prohibitions on tipping off persons subject to AMLC reporting; and the obligation to conduct customer due diligence (CDD) for covered persons.

Whistleblower Protection and Reporting Mechanism: A formal reporting channel (ethics hotline, compliance officer, or board audit committee) for good-faith reports of violations, with protections against retaliation consistent with Republic Act No. 6981 (Witness Protection, Security and Benefit Act) and standard practices under the SEC's Corporate Governance Code.

Sanctions and Enforcement: A clear schedule of sanctions for violations — ranging from written warning to termination for just cause under Article 297(a) of the Labor Code (serious misconduct), administrative fines, and referral for criminal prosecution — with the disciplinary process referencing the company's Code of Conduct and the twin-notice rule from King of Kings Transport v. Mamac (G.R. No. 166208).

Under Philippine law, the Civil Code of the Philippines (Republic Act No. 386) governs contractual obligations. The Revised Corporation Code (Republic Act No. 11232) regulates corporate entities through the Securities and Exchange Commission (SEC). The Labor Code of the Philippines (Presidential Decree No. 442) and Department of Labor and Employment (DOLE) govern employment matters. The Data Privacy Act of 2012 (Republic Act No. 10173) and the National Privacy Commission (NPC) protect personal data. The Bureau of Internal Revenue (BIR) administers tax obligations under the National Internal Revenue Code. The forms-legal.com Corporate Code of Ethics (Philippines) template covers the mandatory elements under Revised Corporation Code (RA 11232, 2019).