Understanding Philippine national agency's commitment on data privacy act of 2012: a case study perspective

Abstract

The Republic Act No. 10173 of the Philippines, also known as "Data Privacy Act of 2012" was established to protect and safeguard the personal data of its citizenry whether in public agencies or private entities, thereby creating the National Privacy Commission (NPC) in 2015, as an independent body mandated to administer the DPA of 2012, to monitor and ensure compliance to right to privacy and data protection. This qualitative research using case study technique aims to explore and explain why and how the National Commission on Indigenous Peoples will comply with R.A. 10173 as the subject of the study, and to determine the challenges and best practices encountered by NCIP relative to compliance. Using single case holistic design with common rationale, and pattern matching as an analytic technique as adapted in Robert Yin's methods and design this study resulted to: e-commerce act is a moderating factor in compliance with DPA 2012, and the determinants of compliance, such as general deterrence and legitimacy of regulations has a compelling casual effect on complying with the law. Further, challenges that encountered by the agency was also a factor in compliance with R.A. 10173 such as, (1) lack of awareness, (2) resource constraints, (3) organizational structure and (4) low priority agenda. It is further recommended to conduct a follow-up study once the recent ISSP is available, vis-à-vis to March 8, 2018 extended deadline.