Quick answer

Selling goods or services online subjects a seller to a combination of consumer protection, e-commerce, tax, and data privacy obligations. On consumer protection, the Consumer Act and its implementing rules apply to online sales just as they do offline: the seller must not engage in deceptive, unfair, or unconscionable sales acts; product descriptions, prices, and terms must be accurate and not misleading; warranties apply to the goods sold (both the implied warranties against hidden defects and eviction, and any express warranty given); and the seller must honor the terms advertised. The Internet Transactions Act strengthened this framework for e-commerce, establishing an E-Commerce Bureau and imposing obligations on online merchants and e-marketplaces, including the duty to provide accurate information about the business and the goods, to have a mechanism for handling consumer complaints and redress, to observe rules against the sale of prohibited goods, and to maintain records; e-marketplaces have their own duties of due diligence over the merchants on their platforms. On disclosure and delivery, the seller should clearly disclose the total price including fees, delivery periods, and the returns and refunds policy, and must deliver conforming goods within the promised period. On taxes, an online seller is required to register with the BIR, issue receipts or invoices for sales, keep books of accounts, and pay the applicable taxes (income tax and either VAT or percentage tax depending on the level of gross sales), and the BIR has issued rules specifically covering online sellers and digital transactions; registration with the DTI (for a sole proprietorship business name) or the SEC (for a corporation or partnership), and with the LGU for a business permit, is likewise required. On data privacy, an online seller that collects customer names, addresses, contact details, and payment information is a personal information controller under the Data Privacy Act, and must obtain valid consent or another lawful basis, implement security measures, and honor data subject rights. So an online seller must sell honestly with accurate disclosure and honored warranties, comply with the Internet Transactions Act, register and pay taxes, and protect customer data.

Online Selling Is Regulated

Selling online carries consumer protection, e-commerce, tax, and data privacy obligations — the same laws apply online as offline.

Consumer Protection and the Internet Transactions Act

No deceptive or unfair sales acts; accurate descriptions, prices, and terms; warranties apply. The Internet Transactions Act adds duties for online merchants and e-marketplaces — accurate business information, a complaints and redress mechanism, no prohibited goods, and record-keeping, with platform due diligence over merchants.

Tax and Registration

Register with the BIR, issue receipts/invoices, keep books, and pay income tax plus VAT or percentage tax. Also register the business with DTI or SEC and get an LGU business permit.

Data Privacy

A seller collecting names, addresses, contacts, and payment data is a personal information controller under the Data Privacy Act — needing a lawful basis, security measures, and respect for data subject rights.

Practical Takeaways

Frequently Asked Questions

Do consumer protection laws apply to online sales? Yes. The Consumer Act and its rules apply to online sales as they do offline, prohibiting deceptive, unfair, or unconscionable sales acts and requiring accurate descriptions, prices, and terms, with warranties applying to the goods.

What does the Internet Transactions Act require of online sellers? Providing accurate information about the business and goods, maintaining a mechanism for consumer complaints and redress, refraining from selling prohibited goods, and keeping records, with e-marketplaces owing due diligence over their merchants.

Do online sellers need to register and pay taxes? Yes. An online seller must register with the BIR, issue receipts or invoices, keep books of accounts, and pay income tax and either VAT or percentage tax, plus register with DTI or SEC and secure an LGU business permit.

Does the Data Privacy Act apply to online sellers? Yes. A seller collecting customer names, addresses, contact details, and payment information is a personal information controller and must have a lawful basis for processing, implement security measures, and honor data subject rights.

This commentary is for general informational purposes only and does not constitute legal advice. For guidance specific to your situation, please consult a licensed attorney.

If you have questions about your rights or options under Philippine law, our firm is available to assist. You may reach us via Viber or WhatsApp, call us at 0995 433 5550, or send an email to vivasnobles@gmail.com. We look forward to hearing from you.