National government agency's compliance on Data Privacy Act of 2012: A case study

• Main Author: Pitogo, Vicente A.
• Format: text
• Published: Animo Repository 2019
• Subjects: Data protection—Law and legislation > Philippines
• Online Access: https://animorepository.dlsu.edu.ph/faculty_research/4120
• Institution: De La Salle University

The Republic Act (RA) No. 10173 of the Philippines, or also known as "Data Privacy Act of 2012" (DPA of 2012) was established to protect and to safeguard the individual personal data in an information and communications systems within the government and the private sector while keeping the fundamental human right to privacy of communication. The creation of the National Privacy Commission (NPC) as an independent body mandated to administer the DPA of 2012; to monitor and to ensure compliance with privacy, and to provide proper data protection procedures. This empirical qualitative research using case study approach aims to discover and describe why and how the country's frontline agency ( Agency A ) complies with DPA of 2012. This paper also seeks to determine the challenges and better practices encountered by the agency relative to compliance and how far the level of commitment does Agency A has taken on. Results further showed that Agency A is Partially Compliant with the Act. It also encountered some challenges such as (a) lack of awareness, (b) wait-and-see attitude, and (c) time and resource constraints. Determinants of compliance like: (i) general deterrence, (ii) legitimacy of regulations, and (iii) reputation and publication had a compelling casual factor why it has conformed to the law. It is further recommended to conduct a follow-up study once the recent Information Systems Strategic Plan (ISSP) is available, vis-a-vis to March 8, 2018, extended deadline. © Published under licence by IOP Publishing Ltd.