Lesson 4: Privacy, Security, and Cyber Laws

Privacy is a major social issue in IT. In the Philippines, the Data Privacy Act (RA 10173) protects personal data. This means businesses and apps must collect consent for data, secure it, and allow access or correction on request. As a student, this translates to everyday practices: never share classmates' personal data without permission, and be careful posting private info on social media.

IT systems should only ask for data that is necessary. For instance, a public Wi-Fi app that tracks your location and web history raises privacy flags. Always think: Am I respecting the user's rights? Realize that Filipinos value privacy but also share a lot on social media. Professional IT practice balances these: build opt-in features (users choose to share) and clear privacy notices. In exams, you may be asked what RA 10173 requires – know it's about consent, security, and accountability for personal data.

Cybercrime (RA 10175) covers offenses like hacking, phishing, cybersex, identity theft, and libel online. As IT professionals, you must secure systems against these crimes. For example, using strong passwords and updates to prevent hacking, educating colleagues about phishing emails, and never engaging in hacking.

One question might describe a scenario (like discovering a colleague used a weak password and got hacked). You should mention security best practices: information confidentiality (encrypt important files), integrity (check data for tampering), and availability (backups). Remember the triad CIA (Confidentiality, Integrity, Availability) – many exam questions expect you to mention this for security issues. Also recall local context: the Cybercrime law in the Philippines expanded scope (e.g., includes child pornography, hate speech online) which you can mention if relevant.