­

Attorneys of the Philippines Legal News

Welcome to our legal news pages. Here is where we provide updates about what's happening in Philippines legal news, and publish helpful articles and tips for Pinoys researching legal matters.

Is The Philippines Ready For Automated Elections?

With just a few days away from 2016 Presidential Election, Commission on Elections (COMELEC) is still dealing with minor glitches. Although Smartmatic International has already assured of an election free of technical issues, there are still some doubts on the effectiveness of vote counting machines in terms of delivering the fast and accurate results.

Smartmatic General Manager Elie Moreno assures voters that it’s all systems go after conducting a mock election on May 3, 2016. All of the vote counting machines have already been delivered and each machine has undergone an international certification review. A hardware acceptance test and local source code review have been put in place. There is a total of 92,509 VCMs, which will be used in the elections. In the event of technical failures, there are additional 5000 machines on standby, which will be used as backup.

The ballots are ready and the technology, which will be used for verifying votes has been checked. The final testing was conducted on Monday and even teachers who will serve as the inspectors of board of election have tested the machines. Although COMELEC encountered a problem with cyber security due to hacking of voter’s personal data, both COMELEC and Smartmatic gave an assurance that the machines are hack-free.

The VCMs are not connected to the Internet and with that said, Lawyer Karen Jimeno assures that hackers do not have access to the information. Jimeno also added that the level of encryption of VCM is 256 bits and this is much higher than the security used for banking programs. Aside from the high encryption level, Smartmatic also use an encrypted SD (Secure Digital) card. The card is intended for preventing tampering of election results.

The preparation of these vote counting machines is said to be in compliance with Republic Act No. 9369:

"SEC.14. Examination and Testing of Equipment or Device of the AES and Opening of the Source Code for Review. - The Commission shall allow the political parties and candidates or their representatives, citizens' arm or their representatives to examine and test.

"The equipment or device to be used in the voting and counting on the day of the electoral exercise, before voting start. Test ballots and test forms shall be provided by the Commission.

"Immediately after the examination and testing of the equipment or device, parties and candidates or their representatives, citizen's arms or their representatives, may submit a written comment to the election officer who shall immediately transmit it to the Commission for appropriate action.
"The election officer shall keep minutes of the testing, a copy of which shall be submitted to the Commission together with the minute of voting."

"Once an AES technology is selected for implementation, the Commission shall promptly make the source code of that technology available and open to any interested political party or groups which may conduct their own review thereof."

The Use Of Leaked Poll Data: A Violation Of Data Privacy Act

It has been recently reported that the voter’s data had been stolen by hackers from the Comelec’s database.  There unlawful use of stolen data is considered a violation of Data Privacy Act according to the acting Justice Secretary Emmanual Caparas. The Comelec is the rightful owner of the stolen information and the unauthorized individuals who use the information will face the consequences for the violation. Although the   leaked poll data is a serious issue, Caparas assured that it should not be a cause for alarm as the integrity of May 9 election will not be compromised. The Department of Justice together with the foreign agencies are also doing their best to hunt down the person/s responsible for hacking the Comelec’s database system.

SECURITY OF PERSONAL INFORMATION

“SEC. 20. Security of Personal Information. – (a) The personal information controller must implement reasonable and appropriate organizational, physical and technical measures intended for the protection of personal information against any accidental or unlawful destruction, alteration and disclosure, as well as against any other unlawful processing.

(b) The personal information controller shall implement reasonable and appropriate measures to protect personal information against natural dangers such as accidental loss or destruction, and human dangers such as unlawful access, fraudulent misuse, unlawful destruction, alteration and contamination.

(c) The determination of the appropriate level of security under this section must take into account the nature of the personal information to be protected, the risks represented by the processing, the size of the organization and complexity of its operations, current data privacy best practices and the cost of security implementation. Subject to guidelines as the Commission may issue from time to time, the measures implemented must include:

(1) Safeguards to protect its computer network against accidental, unlawful or unauthorized usage or interference with or hindering of their functioning or availability;

(2) A security policy with respect to the processing of personal information;

(3) A process for identifying and accessing reasonably foreseeable vulnerabilities in its computer networks, and for taking preventive, corrective and mitigating action against security incidents that can lead to a security breach; and

(4) Regular monitoring for security breaches and a process for taking preventive, corrective and mitigating action against security incidents that can lead to a security breach.

(d) The personal information controller must further ensure that third parties processing personal information on its behalf shall implement the security measures required by this provision.

(e) The employees, agents or representatives of a personal information controller who are involved in the processing of personal information shall operate and hold personal information under strict confidentiality if the personal information are not intended for public disclosure. This obligation shall continue even after leaving the public service, transfer to another position or upon termination of employment or contractual relations.

(f) The personal information controller shall promptly notify the Commission and affected data subjects when sensitive personal information or other information that may, under the circumstances, be used to enable identity fraud are reasonably believed to have been acquired by an unauthorized person, and the personal information controller or the Commission believes (bat such unauthorized acquisition is likely to give rise to a real risk of serious harm to any affected data subject. The notification shall at least describe the nature of the breach, the sensitive personal information possibly involved, and the measures taken by the entity to address the breach. Notification may be delayed only to the extent necessary to determine the scope of the breach, to prevent further disclosures, or to restore reasonable integrity to the information and communications system.

(1) In evaluating if notification is unwarranted, the Commission may take into account compliance by the personal information controller with this section and existence of good faith in the acquisition of personal information.

(2) The Commission may exempt a personal information controller from notification where, in its reasonable judgment, such notification would not be in the public interest or in the interests of the affected data subjects.

(3) The Commission may authorize postponement of notification where it may hinder the progress of a criminal investigation related to a serious breach.”

Comelec Gun Ban Starts In January

The oft-quoted statement, “start the year with a bang” should not be taken literally since COMELEC gun ban is almost in effect. As 2016 presidential election draws near, you can almost sense crimes lurking around the corner and some of which are politically motivated.  During the election period, which starts from January 10, 2016 to June 8, 2016, carrying or transporting firearms and deadly weapons are prohibited.

James Jimenez, COMELEC Spokesman also welcomes application for gun ban exemption. Those who are eligible for exemption can simply visit www.comelec.gov.ph to file their applications.

The rules and regulations can also be found in Resolution No. 10015:

“SECTION 1. Prohibited Acts. - During the Election Period:

No person shall bear, carry or transport Firearms or Deadly Weapons outside his residence or place of business, and in all public places, including any building, street, park, and in private vehicles or public conveyances, even if he is licensed or authorized to possess or to carry the same, unless authorized by the Commission, through the CBFSP, in accordance with the provisions of this Resolution;

No person shall employ, avail himself or engage the services of security personnel or bodyguards, whether or not such security personnel or bodyguards are regular members or officers of the Philippine National Police (PNP), the Armed Forces of the Philippines (AFP), other law enforcement agency of the government or from a private security service provider, unless authorized by the Commission, through the CBFSP, in accordance with the provisions of this Resolution;
No person or entity shall transport and deliver Firearms and/or its parts, Ammunition and/or its components, and Explosives and/or its components, unless authorized by the Commission, through the CBFSP, in accordance with the provisions of this Resolution.”

Section 261. Prohibited Acts. - The following shall be guilty of an election offense:

(q) Carrying firearms outside residence or place of business. - Any person who, although possessing a permit to carry firearm/s, carries any firearm/s outside his residence or place of business during the election period, unless authorized in writing by the Commission: Provided, That a motor vehicle, water or air craft shall not be considered a residence or place of business or extension hereof.

This prohibition shall not apply to cashiers and disbursing officers while in the performance of their duties or to persons who by nature of their official duties, profession, business or occupation habitually carry large sums of money or valuables."
The complete details of Resolution No. 10015 can be found on COMELEC’s official website.

­