CYBERCRIME

Timber investigation under PD 705

A timber inquiry should establish the resource identity, origin, land classification, cutting or collection authority, possession, and required transport documentation.

Child protection under RA 11930.

RA 11930 addresses online sexual abuse or exploitation of children and child sexual abuse or exploitation materials. A child’s apparent consent does not legalize prohibited acts.

Screenshots as evidence

A screenshot of a suspicious payment request is a starting point. Preserve the original message, source, account information, timestamps, and relevant transaction records when lawfully available.

Cybersquatting.

Bad-faith acquisition of a domain name may constitute cybersquatting when the conditions under RA 10175 are met.

Mining-related pollution evidence.

A mining pollution inquiry should examine environmental approvals, permit conditions, actual operations, discharge or contamination evidence, technical findings, and the link between the activity and alleged harm.

.Lawful custody and examination

Lawful possession of a laptop does not automatically authorize every examination of its contents. Investigators must establish the applicable authority and scope before examining data.

Evidence planning for water discharge

 law-based evidence plan links each offense element to records, witnesses, permits, site observations, discharge pathways, sampling, and laboratory findings; document collection methods and custody.

Volatile information.

A powered-on device may contain volatile evidence such as RAM contents. Qualified, authorized personnel should assess and preserve relevant volatile data before actions that may destroy it.

Intergenerational equity.

Intergenerational equity concerns the responsibility to preserve natural resources and environmental conditions for future generations.

Fish deaths and causation.

Fish deaths near an industrial facility after heavy rain justify investigation but do not alone prove that the facility caused them. Assess the timeline, water conditions, discharge routes, and alternative explanations.

.Online wildlife sale under RA 9147.

An advertisement describing a bird as rare is insufficient to establish a violation. Verify the species, conservation status, conduct, permits, and seller’s identity.

Sustainable development.

Sustainable development meets present needs while preserving future generations’ ability to meet their own needs.

.Chainsaw use under RA 9175.

Lawful ownership of a chainsaw does not authorize every use. Examine the registration, intended activity, location, and required authority for the actual cutting.

Authentication

 Authentication provides support that an evidence item is what it is claimed to be. It is distinct from proving that every statement contained in the item is true.

Warrant to Search Seize and Examine Computer Data

 WSSECD authorizes search, seizure, and examination of computer data within the place, items, and scope approved by the court.

Warrant to Intercept Computer Data.

 WICD authorizes interception activities involving communications as they occur, subject to the warrant’s conditions and scope.

Protected-area status

Construction under the NIPAS framework requires verification of the area’s legal designation, boundaries, zoning, and required approvals. Private ownership alone does not resolve protected-area restrictions.

Preservation during recovery.

Restoring a system should be coordinated with evidence preservation. Overwriting relevant logs can impair the ability to determine what occurred.

Hazardous waste entry and storage.

RA 6969 addresses prohibited entry, including transit, and storage or disposal of hazardous and nuclear wastes. Classification and evidence of the actual conduct are essential.

Fish pens in Laguna de Bay

 local government document alone does not establish compliance with LLDA requirements. Verify the necessary authorizations and their scope under RA 4850 and applicable rules.

.Fishing incident facts

vessel’s exact location, gear, activity, and authorization help establish jurisdiction, applicable fishing restrictions, and the elements of a possible offense.

Smoke observations.

 photograph of thick factory smoke is an investigative lead. Establish the source, operating conditions, applicable emission limits, permits, and reliable technical measurements.

.Chain of custody.

 Chain of custody documents an evidence item’s possession, transfers, handling, and storage from collection through presentation.

.Prevention principle

The prevention principle calls for measures that stop known environmental hazards before damage occurs.

Computer-related forgery.

Creating or altering computer data without right so that it appears authentic for legal purposes may constitute computer-related forgery.

.Permit scope.

 permit must be checked against the actual operator, location, activity, conditions, and validity period. Possession of a permit does not establish authority for activities outside its scope.

Warrant to Disclose Computer Data.

authorizes law enforcers to require a person or service provider to disclose specified computer data within the court-authorized scope.

Warrant to Examine Computer Data.

provides authority to examine computer data on a device acquired through a lawful warrantless arrest or another lawful method, in accordance with the Rule on Cybercrime Warrants.

Matching cryptographic hashes

Matching strong cryptographic hashes support the conclusion that properly acquired copies contain the same data. They do not by themselves prove authorship, truthfulness, or lawful acquisition.

Chemical residues under RA 6969.

A shipment labeled recyclable material requires verification of its actual contents, chemical or waste classification, origin, destination, and applicable controls. Use qualified personnel for safe assessment.

.Chemical residues under RA 6969.

A shipment labeled recyclable material requires verification of its actual contents, chemical or waste classification, origin, destination, and applicable controls. Use qualified personnel for safe assessment.

Overlapping environmental laws

 Dumping, water pollution, and protected-area disturbance may raise issues under several laws. Assess the elements, evidence, permits, and jurisdiction of each possible violation.

Evidence transfer records

 An evidence transfer record identifies the item, the persons releasing and receiving it, the transfer time, and the purpose of the transfer.

Exploration and extraction under RA 7942.

An exploration permit does not automatically authorize commercial mineral extraction. Examine the permit’s scope and the additional authority required for the actual operation.

Illegal access and data interference.

Before classifying the use of borrowed credentials or deletion of a file, establish the user’s authority, the acts performed, and the applicable offense elements. Borrowed credentials alone do not establish illegal access.

Attribution in child-protection investigations.

An account that transmitted prohibited material must be linked to the responsible person through lawful evidence. Protect the child’s identity and avoid unnecessary redistribution of the material.

Garbage at a vacant lot

. An untidy lot with piles of garbage requires fact finding. Establish who deposited the waste, the waste type, location, circumstances, and applicable requirements before concluding that a particular person violated the law.

Small-scale mining contracts under RA 7076

 When another operator mines under a cooperative’s contract, examine the contractor’s identity, operating authority, and possible transfer or subcontracting. RA 7076 prohibits transfer, subcontracting, or assignment of the contract.

Time and account context

A screenshot showing 8:30 cannot establish a reliable event timeline or responsible person without checking the date, time zone, clock accuracy, account ownership, and source records.

Response to a shared-workstation incident.

 For a suspicious message reported at 09:15 Philippine time, document the time zone, device condition, users, and available records; preserve evidence and avoid unnecessary changes to the workstation.

Computer-related fraud.

Unauthorized manipulation of computer data or interference with a system, with fraudulent intent, raises computer-related fraud concerns under RA 10175.

.Philippine Clean Air Act.

RA 8749 is the Philippine Clean Air Act of 1999 and provides the framework for air quality management and emission controls.

Discolored water after rain

Stream discoloration after rainfall does not by itself identify a pollutant or responsible source. Investigate upstream activities, runoff, discharge points, sampling results, and other explanations.

Source pathway and receptor.

In a runoff incident, dumped waste is the possible source, the canal and river are transport pathways, and aquatic organisms and exposed residents are receptors.

Mixing separated recyclables

 RA 9003 prohibits mixing source-separated recyclable material with other solid waste in collection or disposal vehicles, boxes, containers, or receptacles.

Philippine Fisheries Code.

RA 8550, as amended by RA 10654, governs Philippine fisheries and aquatic-resource conservation and addresses illegal, unreported, and unregulated fishing.

Prohibited solid-waste practices

RA 9003 identifies prohibited acts including littering, open burning of solid waste, and specified illegal dumping practices.

Computer-related identity thef

Intentional acquisition, use, transfer, possession, alteration, or deletion of another person’s identifying information without right may constitute computer-related identity theft.

Discharge permits under RA 9275

Discharging regulated pollutants without the required valid permit raises a Clean Water Act issue. Verify the discharge, responsible operator, permit requirement, and applicable conditions.

.Cyberlibel.

A defamatory statement published through a computer system requires assessment of the elements of libel, authorship, publication, and applicable defenses before liability is concluded.

.Precautionary principle.

Potentially serious or irreversible environmental harm may justify protective action even when scientific knowledge remains incomplete.