Companies that engage in processing personal data of individuals living within or outside the Philippines should have Personal Information Controllers