The National Privacy Commission does not require every organization to register in the same way, but covered PICs and PIPs must register their Data Processing Systems and Data Protection Officer under NPC Circular No. 2022-04. This article explains who must register, when registration is required, what exemptions exist, and what organizations should do next.