AL

CYBER LAWS OF THE PHILIPPINES

CYBER LAWS OF THE PHILIPPINES

OUTLINE

  • What is Cybercrime Law
  • Roles of Cybercrime Law
  • RA 8792: E-commerce Law of the Philippines
  • RA 10175: Cybercrime Law of the Philippines
  • RA 10844: DICT Act
  • RA 1017: Data Privacy Act

WHAT IS CYBERCRIME LAW?

  • Defined as a crime in which a computer is the object of the crime (hacking, phishing, spamming) or used as a tool to commit an offense (child pornography, hate crimes).
  • Cybercriminals may use computer technology to access personal information, business trade secrets or use the internet for exploitative or malicious purposes.
  • Cybercrime may also be referred to as computer crime

COMMON TYPES OF CYBERCRIME

  • Online Bank Information Theft
  • Identity Theft
  • Online Predatory Crimes
  • Unauthorized Computer Access

TWO CATEGORIES OF CYBERCRIME ACTIVITIES

  • Crimes that target computer networks or devices. These types of crimes include viruses and denial-of-service (DoS) attacks.
  • Crimes that use computer networks to advance other criminal activities. These types of crimes include cyberstalking, phishing and fraud or identity theft

ROLE OF CYBERCRIME LAW

  • Establishes socio-legal sanctions for cybercrime
  • Protects ICT users, in general, and mialgates and/or prevents harm to people, data, systems, services, and infrastructure in particular.
  • Protects human rights.
  • Enables the investigation and prosecution of crimes committed online.
  • Facilitates cooperation between countries on cybercrime matters (UNODC, 2013, p. 52)

RA 8797: E-commerce (Electronic Commerce) Law of the Philippines

  • E-commerce refers to the business over the internet. Websites such as Lazada, Zalora, Shopee and etc. are all e- commerce sites
  • An act providing for the recognition and use of electronic commercial and non-commercial transactions and documents, penalties for unlawful use thereof and for other purposes
  • Allows the formation of contracts in electronic form.
  • Makes banking transactions done through ATM switching networks absolute once automated.
  • The Department of Trade & Industry supervises the e- commerce development in the Philippines.
  • Made cable, broadcast, and wireless physical infrastructure within the activity of telecommunications.
  • Provided guidelines as to when a service provider can be liable.
  • Authorities and parties with the legal right can only gain access to electronic documents, messages, and signatures for confidentiality purposes.

2 TYPES OF COMMERCE TRANSACTIONS

  1. Business-to-Consumer (B2C)
    sells products/services directly to personal use customers. It includes online retailing, banking, travel services, auctions, heath, and real estate sites.
  2. Business-to-Business (B2B)
    involves transactions between business, such as manufacturer to wholesaler and wholesaler to retailer.

RA 8792 OBJECTIVES

  • Provide a secure legal framework and environment for electronic commerce.
  • Protect the integrity of electronic documents and signatures, as well as its transmission and communication so as to build and ensure the trust and reliance of the public on electronic transactions.

RA 10175 Cybercrime Law of the Philippines

  • Signed into law by President Benigno Aquino III on September 12, 2012
  • It went into effect on October 3, 2012
  • However, it received a temporary restraining order (TRO) on October 9, 2012.

CYBERCRIME RELATED LAWS

  • RA 4200 Anti-Wiretapping Law
  • RA 8484-Access Device Regulation Act
  • RA 8792-E-commerce Law
  • RA 9208-Anti-Trafficking in Persons Act
  • RA 9775-Anti-Child Pornography Act
  • RA 9995-Anti-Photo and Voyeurism Act

DECLARATION OF POLICY

"The state recognizes the vital role of information and communications industries in the nation's overall social and economic development. The state also recognizes the need to protect and safeguard the integrity of computer and communications systems from all forms of misuse, abuse, and illegal access by making punishable under the law such conduct or conducts."

TYPES OF CYBERCRIME

1. Illegal access

Unauthorized access (without right) to a computer system or application.

Prision mayor (imprisonment of six years and 1 day up to 12 years) or a fine of at least Two hundred thousand pesos (P200,000) up to a maximum amount commensurate to the damage incurred or BOTH.————————If committed against critical infrastructure:Reclusion temporal (imprisonment for twelve years and one day up to twenty years) or a fine of at least Five hundred thousand pesos (P500,000) up to a maximum amount commensurate to the damage incurred or BOTH

2. Illegal interception

Unauthorized interception of any non-public transmission of computer data to, from, or within a computer system

– same as above

3. Data Interference

Unauthorized alteration, damaging, deletion or deterioration of computer data, electronic document, or electronic data message, and including the introduction or transmission of viruses.Authorized action can also be covered by this provision if the action of the person went beyond agreed scope resulting to damages stated in this provision.

– same as above

4. System Interference

Unauthorized hindering or interference with the functioning of a computer or computer network by inputting, transmitting, damaging, deleting, deteriorating, altering or suppressing computer data or program, electronic document, or electronic data messages, and including the introduction or transmission of viruses.Authorized action can also be covered by this provision if the action of the person went beyond agreed scope resulting to damages stated in this provision.

– same as above

5. Misuse of devices

The unauthorized use, possession, production, sale, procurement, importation, distribution, or otherwise making available, of devices, computer program designed or adapted for the purpose of committing any of the offenses stated in Republic Act 10175.Unauthorized use of computer password, access code, or similar data by which the whole or any part of a computer system is capable of being accessed with intent that it be used for the purpose of committing any of the offenses under Republic Act 10175.

– same as above except fine should be no more than Five hundred thousand pesos (P500,000)

6. Cyber-squatting

Acquisition of domain name over the Internet in bad faith to profit, mislead, destroy reputation, and deprive others from the registering the same. This includes those existing trademark at the time of registration; names of persons other than the registrant; and acquired with intellectual property interests in it.Those who get domain names of prominent brands and individuals which in turn is used to damage their reputation – can be sued under this provision.Note that freedom of expression and infringement on trademarks or names of person are usually treated separately. A party can exercise freedom of expression without necessarily violating the trademarks of a brand or names of persons.

– same as above

7. Computer-related Forgery

Unauthorized input, alteration, or deletion of computer data resulting to inauthentic data with the intent that it be considered or acted upon for legal purposes as if it were authentic, regardless whether or not the data is directly readable and intelligible; orThe act of knowingly using computer data which is the product of computer-related forgery as defined here, for the purpose of perpetuating a fraudulent or dishonest design.

Prision mayor (imprisonment of six years and 1 day up to 12 years) or a fine of at least Two hundred thousand pesos (P200,000) up to a maximum amount commensurate to the damage incurred or BOTH.

8. Computer-related Fraud

Unauthorized input, alteration, or deletion of computer data or program or interference in the functioning of a computer system, causing damage thereby with fraudulent intent

– same as aboveProvided, That if no damage has yet been caused, the penalty imposed shall be one (1) degree lower.

9. Computer-related Identity Theft

Unauthorized acquisition, use, misuse, transfer, possession, alteration or deletion of identifying information belonging to another, whether natural or juridical.

– same as above

10. Cybersex

Willful engagement, maintenance, control, or operation, directly or indirectly, of any lascivious exhibition of sexual organs or sexual activity, with the aid of a computer system, for favor or consideration.There is a discussion on this matter if it involves “couples” or “people in relationship” who engage in cybersex. For as long it is not done for favor or consideration, I don’t think it will be covered. However, if one party (in a couple or relationship) sues claiming to be forced to do cybersex, then it can be covered.

Prision mayor (imprisonment of six years and 1 day up to 12 years) or a fine of at least Two hundred thousand pesos (P200,000) but not exceeding One million pesos (P1,000,000) or BOTH.

11. Child Pornography

Unlawful or prohibited acts defined and punishable by Republic Act No. 9775 or the Anti-Child Pornography Act of 2009, committed through a computer system.

Penalty to be imposed shall be one (1) degree higher than that provided for in Republic Act 9775, if committed through a computer system.

****** Unsolicited Commercial Communications (SPAMMING)

THIS PROVISION WAS STRUCK DOWN BY THE SUPREME COURT AS UNCONSTITUTIONAL.

12. Libel

Unlawful or prohibited acts of libel as defined in Article 355 of the Revised Penal Code, as amended committed through a computer system or any other similar means which may be devised in the future.Revised Penal Code Art. 355 states Libel means by writings or similar means. — A libel committed by means of writing, printing, lithography, engraving, radio, phonograph, painting, theatrical exhibition, cinematographic exhibition, or any similar means, shall be punished by prision correccional in its minimum and medium periods or a fine ranging from 200 to 6,000 pesos, or both, in addition to the civil action which may be brought by the offended party.The Cybercrime Prevention Act strengthened libel in terms of penalty provisions.The electronic counterpart of libel has been recognized since the year 2000 when the E-Commerce Law was passed. The E-Commerce Law empowered all existing laws to recognize its electronic counterpart whether commercial or not in nature.

Penalty to be imposed shall be one (1) degree higher than that provided for by the Revised Penal Code, as amended, and special laws, as the case may be.

13. Aiding or Abetting in the commission of cybercrime

Any person who willfully abets or aids in the commission of any of the offenses enumerated in this Act shall be held liable.

Imprisonment of one (1) degree lower than that of the prescribed penalty for the offense or a fine of at least One hundred thousand pesos (P100,000) but not exceeding Five hundred thousand pesos (P500,000) or both.

14. Attempt in the commission of cybercrime

Any person who willfully attempts to commit any of the offenses enumerated in this Act shall be held liable

– same as above

15. All crimes defined and penalized by the Revised Penal Code, as amended, and special laws, if committed by, through and with the use of information and communications technologies shall be covered by the relevant provisions of this Act.

Penalty to be imposed shall be one (1) degree higher than that provided for by the Revised Penal Code, as amended, and special laws, as the case may be

Although not exactly a cybercrime, I am including this here as penalties are also imposed by the law.

16. Corporate Liability. (Section 9)

When any of the punishable acts herein defined are knowingly committed on behalf of or for the benefit of a juridical person, by a natural person acting either individually or as part of an organ of the juridical person, who has a leading position within, based on:

  1. a power of representation of the juridical person provided the act committed falls within the scope of such authority;
  2. an authority to take decisions on behalf of the juridical person. Provided, That the act committed falls within the scope of such authority; or
  3. an authority to exercise control within the juridical person,It also includes commission of any of the punishable acts made possible due to the lack of supervision or control.

For sanctioned actions, Juridical person shall be held liable for a fine equivalent to at least double the fines imposable in Section 7 up to a maximum of Ten million pesos (P10,000,000).For neglect such as misuse of computer resources that resulted to cybercrime committed in organization physical or virtual premises or resources, juridical person shall be held liable for a fine equivalent to at least double the fines imposable in Section 7 up to a maximum of Five million pesos (P5,000,000).Criminal liability may still apply to the natural person.

RA 10844 FOCUSES ON:

  • Improving Public Access
  • Educate and expand our knowledge on
  • Information and Communications Technology (ICT)
  • Protect the Consumer and Industry development
  • Nation Building through ICT
  • Safeguarding of Information
  • Widen the scope of ICT in the Philippines

RA 10173: Data Privacy Act

  • An act protecting individual personal information in mation and communications systems in the government and private sector, creating for this purpose a National Privacy Commission (NPC), and for other purposes.
  • The Department of Information and Communication Technology (DICT) is the responsible agency and home to the NPC.

Why Do We Need Data Privacy Act?

  • Growing and important business process management and health information technology.
  • Expenses on IT has reached an all time high
  • We are in the process of enabling free public Wi-Fi
  • The digital engagement of Filipinos are ranked #1 in the whole world

Who needs to Register?

  • Companies with at least 250 employees or access to the personable and identifiable information of at least 1,000 people are required.