ELECTRONIC COMMERCE ACT and DATA PRIVACY ACT (dof)

ELECTRONIC COMMERCE ACT

ELECTRONIC COMMERCE ACT

• An    act    providing    and    use    of    electronic commercial  and  non-commercial  transactions, penalties  for  unlawful  use  thereof,  and  other purposes

ELECTRONIC COMMERCE ACT

• facilitate   domestic   and   international dealings,   transactions,   arrangements agreements,  contracts  and  exchanges and   storage   of   information through the  utilization   of  electronic,   optical and similar medium, mode, instrumentality     and     technology to recognize the authenticity and reliability of  electronic  data  messages or  electronic  documents  related   to such  activities  and  to  promote  the universal use of electronic transactions in the government and by the general public.

Domain    Name    System

 The    Government supports   initiatives   to ensure  that  Internet users   will   have   a   sufficient   voice   in   the governance of the domain name system.

Access  to  Public  Records

– Government shall provide equal and transparent access to public domain information.

Dispute Mechanisms

– Government encourages the use of self-regulatory extra-judicial dispute settlement mechanisms such as arbitration and mediation  as  an  effective  way  of  resolving electronic commerce disputes. (Not court action)

Addressee

• refers to a person who is intended by the originator to receive the electronic data message or electronic document, but does not include a person acting as an intermediary with respect to that electronic data message or electronic data document. 

Computer

• refers  to  any  device  or  apparatus  singly  or  interconnected  which,  by  electronic,  electro-mechanical,  optical  and/or  magnetic  impulse,  or  other  means  with  the  same  function,  can  receive,  record, transmit, store, process, correlate, analyze, projects, retrieve, and/or produce information, data, text, graphics, figures, voice, video, symbols or other modes of expression or perform any one or more of these functions. 

Electronic data message

• refers to information generated, sent, received or stored by electronic, optical or similar means.

Information and Communications System

• refers to a system for generating, sending, receiving, storing, or otherwise processing electronic documents and includes the computer system or other similar device by or  in  which  data  is  recorded  or  stored  and  any  procedures  related  to  the  recording  or  storage  of  electronic document. 

Electronic  signature

• refers  to  any  distinctive  mark,  characteristic  and/or  sound  in  electronic  from, representing the identity of a person and attached to or logically associated with the electronic data message or electronic  document  or  any  methodology  or  procedures  employed  or  adopted  by  a  person  and  executed  or adopted  by  such  person  with  the  intention  of  authenticating  or  approving  an  electronic  data  message  or electronic document. 

Electronic document

• refers to information or the representation of information, data, figures, symbols or other modes of written expression, described or however represented, by which a right is established or an obligation  extinguished,  or  by  which  a  fact  may  be  prove  and  affirmed,  which  is  receive,  recorded, transmitted, stored, processed, retrieved or produced electronically.

Electronic key

• refers to a secret code which secures and defends sensitive information that crossover public channels into a form decipherable only with a matching electronic key.

Intermediary

• refers  to  a  person  who  in  behalf  of  another  person  and  with  respect  to  a  particular electronic  document  sends,  receives  and/or  stores,  provides  other  services  in  respect  of  that  electronic data message or electronic document.

Originator

• refers to a person by whom, or on whose behalf, the electronic document purports to have been created,  generated and/or sent. The term does not  include a  person acting as an intermediary with respect to that electronic document.

HACKING / CRACKLING

• unauthorized  access  into  or  interference  in  a  computer system/server or information and communication system; or any access in order to corrupt, alter, steal, or destroy using a computer  or other  similar information and communication devices, without the knowledge and consent of the owner of the  computer  or  information  and  communications  system, including the  introduction  of  computer  viruses  and  the  like, resulting  in  the  corruption,  destruction,  alteration,  theft  or loss of electronic data messages or electronic documents

PIRACY

• the  unauthorized  copying,  reproduction,  dissemination,  or distribution,  importation,  use,  removal,  alteration, substitution,  modification,  storage,  uploading,  downloading, communication,  making  available  to  the  public,  or broadcasting  of  protected  material,  electronic  signature  or copyrighted  works  including  legally  protected  sound recording  or  phonograms  or  information  material  on protected  works,  through  the  use  of  telecommunication networks,  such  as,  but  not  limited  to,  the  internet,  in  a manner that infringes intellectual property rights

Reciprocity

• All  benefits,  privileges,  advantages  or  statutory  rules  established  under  the  E-Commerce  Act, including those involving practice of profession, shall be enjoyed only by parties whose country origin grants the same benefits and privileges or advantages to Filipino citizens.

Commission

shall refer to the National Privacy Commission created by virtue of this Act

Consent of the data subject

refers to any freely given, specific, informed indication of will, whereby the data subject  agrees  to  the  collection  and  processing  of  personal  information  about  and/or  relating  to  him  or  her. Consent shall be evidenced by written, electronic or recorded means. It may also be given on behalf of the data subject by an agent specifically authorized by the data subject to do so. 

Data subject

refers to an individual whose personal information is processed.

Direct marketing

refers to communication by whatever means of any advertising or marketing material which is directed to particular individuals. 

Filing  system

refers  to  any  act  of  information  relating  to  natural  or  juridical  persons  to  the  extent  that, although  the  information  is  not  processed  by  equipment  operating  automatically  in  response  to  instructions given  for  that  purpose,  the  set  is  structured,  either  by  reference  to  individuals  or  by  reference  to  criteria relating  to  individuals,  in  such  a  way  that  specific  information  relating  to  a  particular  person  is  readily accessible.

Information and Communications System

refers to a system for generating, sending, receiving, storing or otherwise  processing electronic  data  messages or electronic documents and includes  the  computer  system  or other  similar  device  by  or  which  data  is  recorded,  transmitted  or  stored  and  any  procedure  related  to  the recording, transmission or storage of electronic data, electronic message, or electronic document.

PERSONAL INFORMATION 

refers to any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.

Subcontract of Personal Information

• responsible for ensuring that proper safeguards 

• prevent its use for unauthorized purposes

Extraterritorial Application

The Data Privacy Act applies to an act done or practice engaged in and outside of the Philippines by an entity

PRIVILEGED  INFORMATION

refers  to  any  and  all  forms  of  data  which  under  the  Rules  of  Court  and  other pertinent laws constitute privileged communication.

SENSITIVE PERSONAL INFORMATION

• personal information that are about: 

  • Race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations 

  • Health, education, genetic or sexual life of a person 

  • Issued by government agencies peculiar to an individual 

  • Specifically established by an executive order or an act of congress to be kept classified. 

Right to Data Portability

•  data subject has the right to obtain an electronic copy of the information

Principle of Accountability

•  Each personal information controller is responsible for personal information under its control or custody, including information that have been transferred to a third party for processing, whether domestically or internationally, subject to cross-border arrangement and cooperation. 

  personal  information  controller

 is  accountable  for  complying  with  the  requirements of  the  Data Privacy  Act  and  shall  use  contractual  or  other  reasonable  means  to  provide  a  comparable  level  of protection while the information are being processed by a third party. 

Data  Protection  Officer

 :  The  personal  information  controller  shall  designate  an  individual  or individuals who are accountable for the organization’s compliance with the Data Privacy Act. The identity of the individual(s) so designated shall be made known to any data subject upon request

Purpose Test-

Are you pursuing a legitimate interest?

Necessity Test

-Is the processing necessary for that purpose?

Balancing Test

-Do the individual’s interests override the legitimate interest?