The Philippines Just Wrote the Rulebook on Ethical AI: Here’s What It Means for BPOs

AI already runs through Philippine IT-BPM operations. QA scoring, coaching, workforce planning, all lean on it in some form. A shared standard for using it responsibly was the piece missing until now.

IBPAP, the IT and Business Process Association of the Philippines, closed that gap this year. Its Ethical AI Use and Risk Governance Policy Framework gives member companies a voluntary reference model, built specifically for Philippine IT-BPM and the BPOs inside it.

Where the Philippines Stands on AI Governance in Southeast Asia

Southeast Asia's AI governance landscape is uneven, and the Philippines sits in the middle of it. Singapore has launched far more governance initiatives than its neighbors, including a national strategy and a model AI governance framework, positioning itself as a potential benchmark for the wider region. Indonesia, Thailand, and Vietnam have each released or are preparing their own AI-related draft laws, while the Philippines has no clear timeline for national AI legislation despite expressing intent to build one.

The country's own national strategy work dates back to 2021, a roadmap rather than an enforceable law. ASEAN's regional guide on AI governance and ethics, issued in February 2024, set voluntary principles as the shared baseline across the bloc. IBPAP's framework applies that same voluntary, principles-first logic directly to IT-BPM, arriving well ahead of any Philippine AI statute.

That timing puts the Philippine BPO industry in an unusual position. It isn't waiting on the state to define responsible AI. It's defining it first, and giving the state's eventual framework a running head start.

Why IBPAP Moved First on Ethical AI

No Philippine law regulates AI today. IBPAP built a framework anyway, and the choice says something about how the industry reads its own risk. Waiting for legislation would leave BPOs guessing at what "responsible AI" means to a regulator who hasn't spoken yet.

The framework grounds itself in the Data Privacy Act of 2012 and NPC Advisory No. 2024-04, tracks the DICT National AI Strategy Roadmap 2.0 and the proposed AI Regulations Act, and aligns with the ASEAN Guide on AI Governance and Ethics, the NIST AI Risk Management Framework, and ISO/IEC 42001:2023.

Put plainly: BPOs now have a way to prove their AI use is safe, auditable, and globally credible before legislation catches up. For an industry that competes globally on trust as much as cost, that head start counts.

What the IBPAP Ethical AI Framework Governs

Six areas carry the weight of the framework, each one chosen for a people-heavy industry rather than a purely technical one:

• Governance and human oversight. Someone stays accountable for every AI decision. The algorithm never carries that responsibility alone.
• Data protection. Client and employee data stays inside the boundaries the Data Privacy Act already sets, even as AI touches more of it.
• Vendor management. Companies vet their AI vendors with the same rigor they'd apply to a client contract.
• Workforce transition. As AI reshapes roles, companies plan the shift instead of letting it land on agents unannounced.
• Incident response. A process exists before an AI system fails, not after.
• Sustainable implementation. Growth targets build in the labor and cost shifts AI adoption brings.

That last point matters more than it might read at first. A framework that treats AI as free efficiency sets companies up to cut corners on the workforce transition. This one doesn't.

An Ethical AI Framework Built to Flex, Not Break

Controls scale to a company's size, client obligations, and AI maturity. A thousand-agent enterprise and a two-hundred-agent regional operator both work under the same framework, each calibrated to its own risk profile. Neither gets forced into a governance model built for the other.

That flexibility is what makes voluntary adoption realistic. A framework rigid enough to demand enterprise-grade controls from every member would have priced out half the industry before it started.

Proof Before Policy: IBPAP Governs Its Own AI First

IBPAP didn't stop at publishing guidance. BenchmarkPH, its AI-powered ESG intelligence and benchmarking initiative, runs under this same model already and carries a Tier 2 risk classification. Member companies can use it today, and the data it gathers feeds directly into the industry's 2026 Sustainability Report.

Building the framework's first real application before asking the industry to adopt it changes the credibility of the ask. IBPAP is governing its own AI use by the same standard it's proposing for everyone else.

The Ethical AI Question Every Client Should Ask a BPO

For companies evaluating a BPO partner, this framework hands you a useful filter. A partner who can point to a governance model has already answered the harder questions: who reviews AI decisions, how client data moves through AI workflows, what happens when something goes wrong.

Celeste Ilagan, IBPAP's President and CEO-designate, frames responsible AI as the structure that lets companies innovate with confidence.

Where Ethical AI Governance Leaves the Philippine BPO Industry

AmplifAI, an IBPAP member, is aligning its own AI governance against this framework as adoption spreads across the industry.

More sectors are likely to build their own governance ahead of regulation, not just IT-BPM. The real test will be whether self-governed AI ends up setting a higher bar than the law eventually does.

Written by Ana Katrin B. Pangan, AmplifAI.