In the Philippines, the legal framework for addressing Hacking and Cyberlibel is primarily governed by Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012. Victims of these offenses have specific legal avenues to seek redress, involving specialized law enforcement agencies and the prosecutorial arm of the Department of Justice.
1. Defining the Offenses
Hacking (Illegal Access)
Under Section 4(a)(1) of R.A. 10175, hacking is legally termed as Illegal Access. It is the access to the whole or any part of a computer system without right. This includes breaking into social media accounts, emails, or private databases. Related offenses include:
- Illegal Interception: Technical interception of non-public transmissions of computer data.
- Data Interference: The intentional alteration, damaging, or deletion of computer data without right.
Cyberlibel
Under Section 4(c)(4), Cyberlibel is the publication of defamatory statements through a computer system or any other similar means. It carries the elements of traditional libel under the Revised Penal Code (RPC):
- An allegation of a discreditable act or condition.
- Publication (made known to a third person).
- Malice (legal or factual).
- Identifiability of the victim.
Key Distinction: The penalty for Cyberlibel is one degree higher than that prescribed for libel in the RPC.
2. Where to File the Complaint
There are two primary law enforcement agencies tasked with investigating cybercrimes in the Philippines. A victim may approach either:
- PNP-ACG (Philippine National Police - Anti-Cybercrime Group): Headquartered at Camp Crame, Quezon City, with various regional satellite offices. They are equipped for forensic digital extraction and tracking.
- NBI-CCD (National Bureau of Investigation - Cybercrime Division): Located at the NBI Building in Manila. They specialize in complex technical investigations and coordinate with international agencies if the perpetrator is abroad.
3. The Step-by-Step Process
Step 1: Evidence Preservation
Before a complaint is filed, the victim must secure "electronic evidence." In the Philippines, this is governed by the Rules on Electronic Evidence (REE).
- For Cyberlibel: Take screenshots of the defamatory posts, including the URL, the date/time, and the profile of the perpetrator. Do not delete the messages, as metadata may be required.
- For Hacking: Take note of unauthorized login notifications, changed recovery emails, and any logs provided by the service provider (e.g., Facebook or Google).
Step 2: Initial Report and Investigation
Visit the PNP-ACG or NBI-CCD. An investigator will take your statement and examine the digital evidence. If the evidence is sufficient, the agency will conduct a police investigation. They may issue subpoenas to Service Providers (like ISPs or Social Media platforms) to identify the I.P. address or account owner.
Step 3: Filing the Complaint-Affidavit
Once the identity of the perpetrator is established, a formal Complaint-Affidavit must be executed. This is a sworn statement detailing the facts of the case. It must be subscribed and sworn to before a Prosecutor or a notary public.
Step 4: Preliminary Investigation
The complaint is filed with the Office of the City/Provincial Prosecutor. The Prosecutor will:
- Issue a subpoena to the respondent (the person being sued).
- Allow the respondent to submit a Counter-Affidavit.
- Determine if there is Probable Cause to believe a crime was committed.
Step 5: Filing of Information in Court
If Probable Cause is found, the Prosecutor will file a formal "Information" (charge sheet) with the Regional Trial Court (RTC) designated as a Special Cybercrime Court.
4. Prescription Periods
- Cyberlibel: Under current Philippine jurisprudence (e.g., Tolentino vs. People), the prescription period for Cyberlibel is one (1) year. This means the complaint must be filed within a year from the time the defamatory material was published or discovered.
- Hacking: Generally, the prescription for other cybercrimes under R.A. 10175 is longer, following the periods set in Act No. 3326 (typically 12 years for offenses punished with imprisonment of 6 years or more).
5. Penalties and Liabilities
| Offense | Penalty Range |
|---|---|
| Hacking (Illegal Access) | Prision Mayor (6 years and 1 day to 12 years) or a fine of at least ₱200,000. |
| Cyberlibel | Prision Correccional in its maximum period to Prision Mayor in its minimum period (4 years, 2 months, and 1 day to 8 years). |
Civil Liability: Aside from criminal penalties, the victim can claim damages (Moral, Exemplary, and Attorney's Fees) under the Civil Code of the Philippines.
6. Important Considerations
- Jurisdiction: A complaint for Cyberlibel can be filed in the RTC of the province or city where the complainant resides at the time of the commission of the offense, or where the respondent resides.
- Anonymity: If the perpetrator is using a fake name, the NBI or PNP must first conduct a "deep-dive" investigation to link the account to a real-world identity before a formal criminal case can proceed in the Prosecutor's office.