Understanding Philippine national agency's commitment on data privacy act of 2012: a case study perspective

This alert has been successfully added and will be sent to: You will be notified whenever a record that you have chosen has been cited.

To manage your alert preferences, click on the button below. Manage my Alerts

New Citation Alert!

Abstract

The Republic Act No. 10173 of the Philippines, also known as "Data Privacy Act of 2012" was established to protect and safeguard the personal data of its citizenry whether in public agencies or private entities, thereby creating the National Privacy Commission (NPC) in 2015, as an independent body mandated to administer the DPA of 2012, to monitor and ensure compliance to right to privacy and data protection. This qualitative research using case study technique aims to explore and explain why and how the National Commission on Indigenous Peoples will comply with R.A. 10173 as the subject of the study, and to determine the challenges and best practices encountered by NCIP relative to compliance. Using single case holistic design with common rationale, and pattern matching as an analytic technique as adapted in Robert Yin's methods and design this study resulted to: e-commerce act is a moderating factor in compliance with DPA 2012, and the determinants of compliance, such as general deterrence and legitimacy of regulations has a compelling casual effect on complying with the law. Further, challenges that encountered by the agency was also a factor in compliance with R.A. 10173 such as, (1) lack of awareness, (2) resource constraints, (3) organizational structure and (4) low priority agenda. It is further recommended to conduct a follow-up study once the recent ISSP is available, vis-à-vis to March 8, 2018 extended deadline.

References

Romanou, A. 2017. The necessity of the implementation of Privacy by Design in sectors where data protection concerns arise, Comput. Law Secur. Rev., 1--12.

Belanger F. and Crossler, R. 2011. Privacy in Digital Age: A Review of Information Privacy Research in Information Systems, MIS Q., 35, 4, 1017--1041.

Barnard-Wills, D., Pauner Chulvi, C. and De Hert, P. 2016. Data protection authority perspectives on the impact of data protection reform on cooperation in the EU, Comput. Law Secur. Rev., 32, 4, 587--598.

Lachaud, E. 2017. The General Data Protection Regulation and the rise of certification as a regulatory instrument, Comput. Law Secur. Rev., no. August 2017.

Ching, M. R. D., Fabito, B. S., and Celis, N. J. 2017. Data Privacy Act of 2012: A Case Study Approach to Philippine Government Agencies Compliance, Soshum 2017.