Under the Rule on Cybercrime Warrants and the Cybercrime Prevention Act of 2012, service providers have the duty to preserve computer data within a general period of 6 months (see Preservation of Computer Data), upon notice by law enforcement agencies. On the other hand, law enforcement agencies have a requisite period to complete the examination of computer data. Upon the expiration of these periods, the service providers and law enforcement authorities, as the case may be, shall immediately and completely destroy the computer data subject of preservation and examination.
Continue readingCategory Archives: Internet & Tech
Preservation of Computer Data under the Rule on Cybercrime Warrants
The integrity of traffic data and subscriber’s information shall be kept, retained, and preserved by a service provider for a minimum period of six (6) months from the date of the transaction. On the other hand, content data shall be preserved for six (6) months from the date of receipt of the order from law enforcement authorities requiring its preservation. These are provided in Section 13 of Republic Act No. 10175, also known as the Cybercrime Prevention Act of 2012.
Continue readingDisclosure of Computer Data, Warrant to Disclose Computer Data (WDCD), under the Rule on Cybercrime Warrants
As previously noted in the Preservation of Computer Data, the obligation to preserve traffic data, subscriber’s information, and content data does not equate to an obligation to disclose the data. A warrant must be secured to authorize the disclosure of the computer data. This is called a Warrant to Disclose Computer Data (WDCD). This is provided under the Rule on Cybercrime Warrants issued by the Supreme Court pursuant to the Cybercrime Prevention Act of 2012 (Republic Act No. 10175).
Continue readingWarrant to Examine Computer Data (WECD) in Lawful Warrantless Arrests
A warrant is generally required for arrests, or search and seizure. There are, however, valid warrantless arrests or valid warrantless searches and seizures. One exception to the requirement for a search warrant is when the search is conducted pursuant to a valid arrest.
Continue readingSearch, Seizure and Examination of Computer Data (WSSECD) in Cybercrime Warrants
A Warrant to Search, Seize and Examine Computer Data (WSSECD) is an order in writing issued in the name of the People of the Philippines, signed by a judge, upon application of law enforcement authorities, authorizing the latter to search the particular place for items to be seized and/or examined. This is provided under the Rule on Cybercrime Warrants issued by the Supreme Court pursuant to the Cybercrime Prevention Act of 2012 (Republic Act No. 10175).
Continue readingGlossary: Data Privacy, Internet, Technology and Cybercrimes
[Definitions or characterizations provided in Republic Act No. 10173 (Data Privacy Act of 2012) and Republic Act No. 10175 (Cybercrime Prevention Act of 2012), Republic Act No. 8792 (Electronic Commerce of 2000), as well as the respective Implementing Rules and Regulations of these laws, including the Rule on Cybercrime Warrants.]
Continue readingRule on Cybercrime Warrants (A.M. No. 17-11-03-SC): Full Text
[The Supreme Court issued the Rule on Cybercrime Warrants, through A.M. No. 17-11-03-SC dated 3 July 2018. See also Summary/Discussion, full text of the Cybercrime Prevention Act and its IRR. The full text of the Rule on Cybercrime Warrants is reproduced below.]
Continue readingPreliminary Matters (Rule I): Data Privacy Act
[Table of Contents] [Glossary]
Implementing Rules and Regulations of Republic Act No. 10173, known as the “Data Privacy Act of 2012”
Pursuant to the mandate of the National Privacy Commission to administer and implement the provisions of the Data Privacy Act of 2012, and to monitor and ensure compliance of the country with international standards set for data protection, the following rules and regulations are hereby promulgated to effectively implement the provisions of the Act:
Continue readingScope of Application (Rule II): Data Privacy Act
[Table of Contents] [Glossary]
Rule II. Scope of Application
Section 4. Scope. The Act and these Rules apply to the processing of personal data by any natural and juridical person in the government or private sector. They apply to an act done or practice engaged in and outside of the Philippines if:
Continue readingNational Privacy Commission (Rule III): Data Privacy Act
[Table of Contents] [Glossary]
Rule III. National Privacy Commission
Section 8. Mandate. The National Privacy Commission is an independent body mandated to administer and implement the Act, and to monitor and ensure compliance of the country with international standards set for personal data protection.
Continue reading