The eRAMP (Electronic Registry of Application for Market Participant) platform enables online submission of applications for registration and processing of annual fees for capital market participants, including institutions, branches, and professionals. It facilitates the uploading of supporting documents for initial screening, and once the documents are in order, an email notification is sent with the assessment of fees and a link to the eSPAYSEC platform for payment. After payment is processed, the original documents are submitted for final processing, generating and releasing the necessary certificates.

LINK: https://eramp.sec.gov.ph/

We collect the following personal information:

 • Full name
 • Tax Identification Number (TIN)
 • Email Address
 • Business Address
 • Nationality
 • Sex
 • Mobile Number
 • Date of Birth

eRAMP does not collect information about computers (or mobile devices) including IP address, operating system and browser type.

SEC eRAMP does not use cookies to distinguish one user from other users of the facility.

The collected personal information will be utilized in the processing of authenticating documents.

We collect personal information during the registration or renewal process for capital market participants. When users submit applications via the eRAMP platform, they provide personal details as part of the documentation and processing required for their registration or license renewal.

The collected personal information will be utilized for documentation and processing of new and/or renewal of registration of Capital Market Participants. The SEC is also mandated by law to inform the investing public who are the registered professionals. Hence, the SEC will make available to the investing public some information of your registration such as SEC certificate registration number, company affiliation, company license, type of license, payment of registration fee details. The investing public will be able to verify your registration through this online facility.

The information collected includes:

 • Full Name: To identify the individual or entity.
 • Tax Identification Number (TIN): For identification and tax-related purposes.
 • Email Address: To communicate with the applicant regarding the registration process.
 • Business Address: To verify the location and affiliation of the business.
 • Nationality: For regulatory compliance and verification.
 • Sex: For demographic purposes and identity verification.
 • Mobile Number: For communication related to the application process.
 • Date of Birth: To verify the applicant’s age and eligibility.

For this facility, SEC collects, uses and/or processes personal information through electronic or automated means.

The SEC ensures the protection of personal data against accidental or unlawful destruction, alteration, disclosure, and other unlawful processing by implementing appropriate security measures based on the nature of the data.

Personal information of SEC personnel is retained and disposed of in accordance with civil service laws and the National Archives of the Philippines Act of 2007.

Personal data from contractors and service providers are retained for one year after contract expiration. After this period, hard copies are securely destroyed, and soft copies are deleted.

Similarly, personal data from job applicants are retained for one year from collection. After this period, hard copies are securely disposed of, and soft copies are deleted.

Once a record has passed its retention period and is no longer needed, all hard and soft copies of personal information will be securely disposed of and destroyed. Authorized disposal methods include shredding, burial, or sale to a buyer. This process will be carried out in the presence of a Records Management Analyst from the National Archives of the Philippines (NAP), a SEC COA representative, and members of the SEC RMIC, such as the Chairperson, Vice-Chairperson, and relevant Departmental Directors/Records Focals (or their alternates).

Risk refers to the potential for incidents that may harm a data subject or organization, including unauthorized collection, use, disclosure, or access to personal data. It involves threats to the confidentiality, integrity, and availability of personal data or violations of data privacy principles and rights.

The SEC implements physical, technical, and organizational security measures to protect personal data but acknowledges that risks like cyberattacks, malware, and unauthorized access to manual records may still occur.

Adequate policies are in place to manage security incidents, in alignment with NPC policies, circulars, and other relevant issuances.

Only authorized SEC personnel are granted access to personal information collected by SEC through Electronic Registry of Application for Market Participant (eRAMP). Personal information collected via the internet or other electronic methods are stored in a secure database. We use reasonable security safeguards to protect information from loss, unauthorized access, use or disclosure.

Under the Data Privacy Act of 2012, data subject refers to an individual whose personal information is collected and processed. We are duly bound to observe and respect your privacy rights, including your right to information, right to access, right to correct, right to remove, right to damages and right to data portability.

Data subjects may file a request with the Data Protection Officer (DPO). They may contact the DPO at 8818-7204, send an email to [email protected] or file a complaint through imessage.sec.gov.ph.