What the evidence says
The Philippine Data Privacy Act applies where personal data is processed; not every energy data point is personal data.
Cybersecurity also protects availability and physical service, not only confidentiality.
What a business should do next
- Ask who can change setpoints and how access is revoked.
- Test safe operation during internet and vendor-platform loss.