■"<* v-''»£>f«‘ty of t;,;
NINETEENTH CONGRESS OF THE 
REPUBLIC OF THE PHILIPPINES
First Regular Session
24 FEB 26
)
RECEiVID ev.
PI :05
SENATE
S.B. No. 2570
Introduced by SENATOR JOEL VILLANUEVA
AN ACT
STRENGTHENING CYBERCRIME PREVENTION MEASURES, 
AMENDING FOR THE PURPOSE REPUBLIC ACT NO. 10175, 
OTHERWISE KNOWN AS THE “CYBERCRIME PREVENTION ACT OF 
2012”
EXPLANATORY NOTE
Republic Act No. 10175, otherwise known as the “Cybercrime Prevention Act of 
2012” was enacted into law on September 12, 2012, with the aim of preventing and 
combating cybercrimes such as offenses against the confidentiality, integrity, and 
availability of data by facilitating their detection, investigation, and prosecution at both 
the domestic and international levels, and by providing arrangements for fast and 
reliable international cooperation.1
With an increasing number of users and devices, combined with the ever- 
increasing pace of digital technology, the importance of cybersecurity continues to 
grow. The rising number and sophistication of cyber criminals and the expansion of 
their capabilities amplify the challenge of securing our cyberspace.
However, even with the Cybercrime Prevention Act of 2012 and other relevant 
laws in place, the Philippine National Police Anti-Cybercrime Group (PNP-ACG) still 
recorded 19,884 cybercrimes from January 1 to December 7, 2023,2 translating to a 
monetary loss of at least PI 55 million.3 Online scams, in particular, have become the 
most prevalent type of cybercrime, reflecting the changing landscape of digital 
threats.4 The top ten cybercrimes reported to the ACG are Online Scams, Illegal 
Access, Computer Related Identity Theft, ATM/Credit Card Fraud, Threats, Data 
Interference, Anti-photo and Video Voyeurism, Computer Related Fraud, and Unjust
1 Section 2, Republic Act No. 10175, “Cyberciime Prevention Act of 2012'\.
2 PNP-ACG. Available at: httDs://www.Dhilstar.com/headlines/2023/12/20/2320172/online-scam$-tOD-list-2023-cvbercrimes. Accessed on February 
21,2024.
3 DILG. Abalos: Online Scam Artists Rake In P155~M In 8 Months. Available at httDs://www.dilQ.aov.ph/news/Abalos-Online-scam-artist5-rake-in- 
P155-M-in-8-months/NC-2023-1231. Accessed on October 20, 2023.
4 Supra note 2.


Vexation.5 This surge in cybercrimes is closely tied to the increased reliance on the 
internet for various commercial activities.6
Government agencies were likewise targeted. Among the government agencies 
subjected to cybersecurity breaches were the House of Representatives, Philippine 
Health Insurance Corp. (PhilHealth), Department of Science and Technology (DOST), 
Philippine Statistics Authority (PSA) and the Philippine National Police (PNP).7 The 
Senate similarly recorded several attempts to hack its website.8
Thus, the proposed measure seeks to strengthen our cybercrime law by 
broadening the coverage of computer data-related offenses and the inclusion of other 
perpetrators involved in the commission of cybercrimes.
It is for this reason that immediate passage of this bill is earnestly sought.
JOE^ILLANUEVA^
5 Ibid.
6 PNP. Available at: httDs://pnD.aov.Dh/Dnp-probes-16297-cvbercrime-cases-in-2023-397-arrested-4092-rescued/. Accessed on February 21, 
2024.
7 PNA. House To Look For Funding To Boost DICT's Fight vs. Cyber Threats. Available at https://www.pna.qov.ph/articles/1211865. Accessed on 
October 21, 2023.
8 PNA. Government Agencies Need Rigorous Risk Assessments To Thwart cyberattacks. Available at https://www.pna.aov.ph/articles/1212006. 
Accessed on October 25, 2023.


NINETEENTH CONGRESS OF THE 
REPUBLIC OF THE PHILIPPINES 
Second Regular Session
)
SENATE
S.B. No. 257Q
oft'.;.' *;•
24 FEB 26 P1:05
RliCEi -D E" i
Introduced by SENATOR JOEL VILLANUEVA
1
2
3
4
5
6
7
8 
9
10
11
12
13
14
15
16
17
18
19
20 
21 
22
23
24
AN ACT
STRENGTHENING CYBERCRIME PREVENTION MEASURES, 
AMENDING FOR THE PURPOSE REPUBLIC ACT NO. 10175, 
OTHERWISE KNOWN AS THE “CYBERCRIME PREVENTION ACT OF 
2012”
Be it enacted by the Senate and House of Representatives of the Philippines in 
Congress assembled:
Section 1. Section 3 of Republic Act No. 10175 is hereby amended to read as
follows:
SEC. 3. Definition of Terms. - For purposes of this Act, the following 
terms are hereby defined as follows:
a) X xx;
X X x;
(n) Service provider refers to:
(1) xxx;fandJ
(2) X X x[t]; AND
(3) ANY ENTITY CONTRACTED BY ANOTHER ENTITY, 
WHETHER DOMESTIC OR FOREIGN, TO PROCESS ANY 
DATA OR INFORMATION OF ANY PERSON WHEREVER 
LOCATED, INCLUDING ENTITY PROVIDING BUSINESS 
PROCESS OUTSOURCING AND SIMILAR SERVICES.
XXX
(o) Subscriber’s information refers to any information contained in 
the form of computer data or any other form that is held OR ACCESSED


1
2
3
4
5
6
7
8 
9
10
11
12
13
14
15
16
17
18
19
20 
21 
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
by a service provider, relating to subscribers, WHETHER LOCATED IN 
THE PHILIPPINES OR NOT, of its services other than traffic or content 
data and by which identity can be established:
XXX
(Q) IDENTIFYING INFORMATION REFERS TO ANY NAME OR 
NUMBER THAT MAY BE USED ALONE OR IN CONJUNCTION WITH 
ANY OTHER INFORMATION TO IDENTIFY ANY SPECIFIC 
INDIVIDUAL, INCLUDING ANY OF THE FOLLOWING:
(1) NAME, DATE OF BIRTH, DRIVER’S LICENSE 
NUMBER, PASSPORT NUMBER, TAX IDENTIFICATION 
NUMBER OR OTHER GOVERNMENT-ISSUED 
IDENTIFICATION NUMBER;
(2) UNIQUE BIOMETRIC DATA, SUCH AS FINGERPRINT 
OR OTHER UNIQUE PHYSICAL REPRESENTATION;
(3) UNIQUE ELECTRONIC IDENTIFICATION NUMBER, 
ADDRESS, OR ROUTING CODE; AND
(4) TELECOMMUNICATION IDENTIFYING 
INFORMATION OR ACCESS DEVICE.
Section 2. Section 4 of Republic Act No. 10175 is hereby amended to 
read as follows:
SEC. 4. Cybercrime Offenses. - The following acts constitute the 
offense of cybercrime punishable under this Act;
(a) Offenses against the confidentiality, integrity, and availability of 
computer data and systems:
XXX
(3) Data Interference. - The intentional or reckless 
alteration, INPUTTING, damaging, deletion or deterioration of computer 
data, electronic document, or electronic data message, without right, 
including the introduction or transmission of viruses, REGARDLESS OF 
WHO CONTROLS OR OWNS THE COMPUTER DATA.
XXX
(b) Computer-related Offenses:
XXX
(2) Computer-related Fraud. - The unauthorized input, 
alteration, or deletion of computer data or program or interference in the 
functioning of a computer system, causing ANY FORM OF damage 
thereby, WHETHER DIRECT, INDIRECT, LEGAL OR CONTRACTUAL,


1
2
3
4
5
6
7
8 
9
10
11
12
13
14
15
16
17
18
19
20 
21 
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
with fraudulent intent: Provided, That if no damage has been caused, the 
penalty imposable shall be one (1) degree lower.
Section 3. Section 5 of Republic Act No. 10175 is hereby amended to 
read as follows:
SEC.5. Other Offenses. The following acts shall also constitute an 
offense:
(a) Aiding or Abetting in the Commission of Cybercrime. - Any person 
who willfully abets or aids in the commission of, OR INFLUENCES OR 
DECEIVES ANOTHER TO COMMIT any of the offenses enumerated in 
this Act shall be held liable.
(b) XXX.
(C) FAILURE TO SURRENDER COMPUTER DATA OR 
COMPUTER SYSTEM. - ANY PERSON WHO KNOWINGLY AND 
UNLAWFULLY POSSESSES OR FAILS TO SURRENDER ANY 
COMPUTER SYSTEM THAT CONTAINS COMPUTER DATA THAT 
ARE CONSIDERED PERSONAL INFORMATION, SENSITIVE 
PERSONAL INFORMATION OR PRIVILEGED INFORMATION UNDER 
REPUBLIC ACT NO. 10173, OR THE “DATA PRIVACY ACT OF 2012,” 
SHALL BE HELD LIABLE.
(D) SOLICITATION TO COMMIT CYBERCRIME. - ANY PERSON WHO 
WILLFULLY PROPOSES, SOLICITS, OR INDUCES ANOTHER 
PERSON TO COMMIT ANY OF THE OFFENSES UNDER THIS ACT, 
SHALL BE HELD LIABLE.
Section 4. Section 6 of Republic Act No. 10175 is hereby amended to read 
as follows:
SEC. 6. All crimes defined and penalized by the Revised Penal 
Code, as amended, and special laws, if committed by, through and with 
the use of information and communication technologies shall be covered 
by the relevant provisions of this Act: Provided, That the penalty to be 
imposed shall be one (1) degree higher than that provided for by the 
Revised Penal Code, as amended, and special laws, as the case may 
be. THE PROSECUTION OF THE OFFENSES UNDER THIS ACT MAY 
BE INITIATED BY ANY OFFENDED PARTY WHICH MAY INCLUDE AN 
AFFECTED SERVICE PROVIDER.
Section 5. Implementing Rules and Regulations. - The Department of 
Information and Communications Technology (DICT), Department of Justice (DOJ) 
Cybercrime Office, Philippine National Police (PNP) Anti-Cybercrime Group, and the 
National Bureau of Investigation (NBI) Cybercrime Division shall formulate the rules 
and regulations necessary for its effective implementation within ninety (90) days from 
approval of this Act.


1
2
3
4
5
6
7
8 
9
10
Section 6. Separability Clause. - If any provision of this Act is declared 
unconstitutional or invalid, the other provisions not otherwise affected shall remain in 
full force and effect.
Section 7. Repealing Clause. - All laws, decrees, executive orders, rules and 
regulations, and other issuances or parts thereof which are inconsistent with this Act 
are hereby repealed, amended, or modified accordingly.
Section 8. Effectivity. - This Act shall take effect fifteen (15) days after its 
publication in at least two (2) newspapers of general circulation.
Approved,