Personal Information Protection Act; one of the more stringent data-protection regimes in Asia; extraterritorial reach; enforced by PIPC; amendment commencement 11 September 2026 raises penalty ceiling.