Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012, was enacted to address the growing legal vacuum regarding crimes committed through the use of information and communications technology (ICT). Signed into law on September 12, 2012, it provides a comprehensive framework for the prevention, investigation, and prosecution of cyber-related offenses in the Philippines.

I. Classification of Cybercrime Offenses

The law categorizes offenses into four main groups, ensuring that both traditional crimes committed online and crimes unique to the digital space are covered.

1. Offenses Against the Confidentiality, Integrity, and Availability of Computer Data and Systems

These crimes target the technical infrastructure of the digital world.

Illegal Access: Accessing a whole or any part of a computer system without right.
Illegal Interception: Interception made by technical means without right of any non-public transmission of computer data.
Data Interference: Intentional or reckless alteration, damaging, or deletion of computer data.
System Interference: Hindering the functioning of a computer system by inputting, transmitting, or deleting data.
Misuse of Devices: Use, production, or distribution of devices (including passwords or access codes) designed for the purpose of committing the above offenses.

2. Computer-Related Offenses

These are traditional crimes facilitated by the use of a computer system.

Computer-related Forgery: Inputting or altering computer data so that it is unauthentic with the intent that it be considered as if it were authentic.
Computer-related Fraud: Unauthorized input or alteration of data with the intent of procuring an economic benefit for oneself or another.
Computer-related Identity Theft: The intentional acquisition or use of identifying information belonging to another, whether natural or juridical, without right.

3. Content-Related Offenses

These offenses involve the nature of the information being transmitted.

Cybersex: The willful engagement, maintenance, control, or operation of any lascivious exhibition of sexual organs or sexual activity through a computer system for favor or consideration.
Child Pornography: Any form of child pornography committed through a computer system (referencing RA 9775).
Unsolicited Commercial Communications: The transmission of commercial electronic communication with the use of computer system which seeks to advertise or sell products (Note: Certain provisions here were declared unconstitutional).
Cyber Libel: Libelous acts as defined in Article 355 of the Revised Penal Code (RPC), committed through a computer system or any other similar means.

4. Other Offenses

Aiding or Abetting: Willfully assisting in the commission of a cybercrime.
Attempt: Willfully attempting to commit a cybercrime.

II. Penalties and Liabilities

The Act imposes significantly harsher penalties compared to traditional counterparts to serve as a deterrent against the borderless nature of cybercrime.

Offense Category	Standard Penalty Range
Offenses against CIA	Prision mayor (6 years and 1 day to 12 years) or fine of at least ₱200,000.
Computer-related Fraud/Identity Theft	Prision mayor or fine of at least ₱200,000.
Cybersex	Prision mayor or fine of at least ₱200,000.
Child Pornography	Penalties as prescribed by RA 9775, one degree higher.
Cyber Libel	Prision mayor (One degree higher than the RPC penalty).

Section 6 (The "One Degree Higher" Rule): All crimes defined by the Revised Penal Code and special laws, if committed by, through, and with the use of information and communications technologies, shall be covered by the relevant provisions of RA 10175, and the penalty to be imposed shall be one degree higher than that provided for by the original law.

Corporate Liability

When a cybercrime is committed on behalf of or for the benefit of a juridical person (corporation/partnership) by a person in a decision-making position, the entity is held liable for a fine equivalent to at least double the fines set by the law, up to a maximum of ₱5,000,000.

III. Landmark Jurisprudence: Disini v. Secretary of Justice

Following its enactment, several petitions were filed before the Supreme Court challenging the constitutionality of RA 10175. In the consolidated case of Disini v. Secretary of Justice (G.R. No. 203335), the Court ruled on several controversial provisions:

Cyber Libel (Upheld but Limited): The Court upheld the constitutionality of cyber libel but clarified that it only applies to the original author of the post. Those who merely "like," "share," or "comment" on a libelous post cannot be held liable.
Unsolicited Commercial Communications (Struck Down): Provisions penalizing "spam" were declared unconstitutional as they violated the right to freedom of expression and privacy.
Real-time Collection of Traffic Data (Struck Down): Section 12, which allowed law enforcement to collect traffic data in real-time without a court warrant, was declared unconstitutional for violating the right against unreasonable searches and seizures.
Take-down Clause (Struck Down): Section 19, which empowered the DOJ to restrict or block access to computer data found to be in violation of the Act without a warrant, was declared unconstitutional as it constituted a "prior restraint" on freedom of speech.

IV. Law Enforcement and Investigation

The Act designates specific agencies to handle cybercrime enforcement:

National Bureau of Investigation (NBI): Cybercrime Division.
Philippine National Police (PNP): Anti-Cybercrime Group (ACG).
Department of Justice (DOJ): Office of Cybercrime (OOC), which serves as the central authority for international mutual legal assistance.

Key Investigative Powers:

Preservation of Data: Content data and traffic data shall be preserved for a minimum period of six (6) months from the date of the transaction.
Warrant to Disclose Computer Data (WDCD): Law enforcement requires a court-issued warrant to compel service providers to disclose subscriber information or traffic data.
Warrant to Intercept Computer Data (WICD): Required for the listening to or recording of the content of communications.
Warrant to Search, Seize, and Examine Computer Data (WSSECD): Specifically for the search and seizure of physical hardware and the digital data contained therein.

V. Jurisdiction and International Cooperation

Cybercrime is global, and RA 10175 acknowledges this by asserting jurisdiction over:

Offenses committed within the Philippines.
Offenses committed by a Filipino national regardless of location.
Offenses committed against a Filipino national or a juridical person established under Philippine law.
Offenses committed where the computer system used is located in the Philippines, or the damage occurs within the Philippines.

The Philippines participates in international cooperation through the Budapest Convention on Cybercrime, facilitating the exchange of information and evidence with foreign jurisdictions to track offenders across borders.