Data privacy act of 2012 compliance performance of Philippine government agencies: a case study approach

After three months of the initial deadline of the National Privacy Commission (NPC), it is vital to know the status of compliance of the Commission on Higher Education (CHED) and Commission on Elections (COMELEC), especially with the data breached that occurred last March 2016. This research study aims to uncover this and how CHED and COMELEC are applying R.A. 10173 to its business processes and strategies. It has been found out that both government agencies are Partially Compliant having its own challenges. It is prevalent in their latest Information Systems Strategic Plan (ISSP) how they incorporated data protection, data privacy, and information security in their Information Systems initiatives. Although, this will not stop here because they need to implement it and comply with the rest of the R.A. 10173 requirements in time for the next deadline, which is on March 8, 2018.