LAWBYTE 108: THE NON-EFFECTIVE IMPLEMENTATION AND IMPLIED REPEAL OF THE PHILIPPINE CYBERCRIME PREVENTION ACT? Copyright by Dr. Atty. Noel G. Ramiscal

Ever vigilant of cyber law issues that could impact the rights and interests of Philippine citizens who are netizens, Dr. Atty. Noel G. Ramiscal has presented lawyers and law students in his Mandatory Continuing Legal Education (MCLE) lectures and recently concluded lecture tours of three universities in Cebu an important legal issue that could catalyze into a case of first impression:

Did the 2012 Philippine Cybercrime Prevention Act (R.A. 10175) passed in 2012 become effectively implementable with the promulgation of its Implementing Rules and Regulations (IRR) and its later deposit with the University of the Philippines Office of the National Administrative Register (UP ONAR) three years after its passage?

Dr. Atty. Noel G. Ramiscal first expounded on this issue in his MCLE lecture on the “Substantive and Procedural Developments in Cybercrime Law” for the Office of the Solicitor General (OSG) lawyers last October 8, 2015 at the Malcolm Hall, UP Law Center. He also did the same for the Integrated Bar of the Philippines (IBP) Iloilo Chapter last October 29, 2015, at the Iloilo Convention Center; for the IBP Nueva Ecija Chapter last November 12, 2015 at the Rico Fajardo Hall, NEUST, Sumacab, Cabanatuan; for the IBP Batangas Chapter last November 27, 2015 at the OCVAS Training Center in Bolbok; for the lawyers who attended his MCLE lecture last December2, 2015 at the UP Law Center, Penthouse, Diliman; as well as in his lectures for the law schools of the University of Cebu (November 18, 2015), the University of San Carlos (November 19, 2015) and the South Western University (November 20, 2015).

Dr. Atty. Noel G. Ramiscal's lecture on Trends in Cybercrime Law for IBP Batangas, Nov. 27, 2015

Dr. Atty. Noel G. Ramiscal’s lecture on Trends in Cybercrime Law for IBP Batangas, Nov. 27, 2015

R.A. 10175 was approved last September 12, 2012. It specifies the mandatory action that will give rise for its implementation, thus:

Section 28. Implementing Rules and Regulations. — The ICTO-DOST, the DOJ and the Department of the Interior and Local Government (DILG) shall jointly formulate the necessary rules and regulations within ninety (90) days from approval of this Act, for its effective implementation.

If the named agencies followed the mandate of the law, they should have released the IRR at the latest by January of 2013. But they did not.

For those who remember their Philippine Administrative Law, and have done research on the full extent of legal due process via “notice” of the law to the general public, they would know that the full effective implementation of any law would only commence from the time the required certified copies were deposited with the UP ONAR at the U.P. Law Center which usually follows after they have been published in the Official Gazette or newspapers of general circulation. ONAR was established to fulfill the requirement under Section 3 of Book VII of the Administrative Code of 1987 which requires every agency in the Government to file three (3) certified copies of every rule (that includes Implementing Rules and Regulations) adopted by it with the University of the Philippines Law Center.

Dr. Atty. Noel G. Ramiscal's MCLE lecture for OSG lawyers, Oct. 8, 2015

Dr. Atty. Noel G. Ramiscal’s MCLE lecture for OSG lawyers, Oct. 8, 2015

Dr. Atty. Noel G. Ramiscal's MCLE lecture on Electronic Evidence for IBP Iloilo, Oct. 29, 2015

Dr. Atty. Noel G. Ramiscal’s MCLE lecture on Electronic Evidence for IBP Iloilo, Oct. 29, 2015

Dr. Atty. Noel G. Ramiscal's lecture on developments in Cybercrime Law for IBP Nueva Ecija, Nov. 12, 2015

Dr. Atty. Noel G. Ramiscal’s lecture on developments in Cybercrime Law for IBP Nueva Ecija, Nov. 12, 2015

Dr. Ramiscal was able to get a certified copy of all the pages of the R.A. 10175 from the UP ONAR last September 24, 2015. Such certified copy revealed that the certified copies of the IRR were actually deposited with the U.P. ONAR last September 21, 2015.

First page of the IRR of R.A. 10175 certified by UP ONAR, secured by Dr. Atty. Noel G. Ramiscal, September 24, 2015

First page of the IRR of R.A. 10175 certified by UP ONAR, secured by Dr. Atty. Noel G. Ramiscal, September 24, 2015

From the point of view of the administrative process of making laws effectively implementable, the actual date of the full effective implementation of R.A. 10175 is September 21, 2015.

Be that as it may, let’s go back to the question, is R.A. 10175, truly effectively implemented with the late passage of its IRR by three years?

The jurisprudence on implied repeals generally center on either the irreconcilability of two laws, or where the legislature intended one law to substitute an earlier law. Neither is applicable to this matter.

In this case, however, one must look at the directive of Section 28. The operative word in this section relative to these three agencies is the word “shall” which under the rules of statutory construction denotes an imperative act to be done within the specified timeframe.

One could then argue and for good substantial reasons that the Philippine Cybercrime Prevention Act had already been impliedly repealed by the inaction of the concerned agencies for almost three years beyond the legal ninety day period wherein they were supposed to formulate the IRR. They were remiss in their legal duty of observing the time frame. Plus, the lengthy period of their inaction hardly seems reasonable.

The filing of the required copies with UP ONAR is crucial because each rule as provided in Section 4, Book VII of the Administrative Code shall become effective fifteen (15) days from the date of filing with the UP Law Center “unless a different date is fixed by law, or specified in the rule in cases of imminent danger to public health, safety and welfare, the existence of which must be expressed in a statement accompanying the rule”.

But the fact is, R.A. 10175 based its “effective implementation” on the passage of the IRR. Furthermore, there is no statement in the law itself being effectively implemented without the IRR due to any “imminent danger to public health, safety and welfare”.

Moreover, there is also no proviso that offered an alternative way for the law’s effective implementation despite the agencies’ inaction or unreasonable delay. Unlike Republic Act No. 9211, the Tobacco Regulation Act, June 23, 2003, which provided:

Section 37. Implementing Rules. – The IAC-Tobacco shall promulgate such rules and regulations necessary for effective implementation of this Act within six (6) months from the date of publication of this Act. The said rules and regulations shall submitted to the COC- Tobacco for its review. The COC-Tobacco shall approve the implementing rules and regulations within thirty (30) working days of receipt thereof: Provided, That in the event the implementing rules and regulations are not promulgated within the specified period, the specific provisions of this Act shall immediately be executory…

R.A. 10175 did not cover the circumstance when the agencies tasked with the important function of creating the IRR would not fulfill their duty within the timeframe set by the law.

One can take notice of the fact that the law underwent constitutional challenges which was resolved by the Supreme Court in an en banc decision in February 2014 which upheld the constitutionality of most of the law’s questioned provisions. This contingency is neither a legal impediment nor a legal excuse for the involved agencies not to have come up with the IRR within the stipulated time stated in the law. The fact that the Supreme Court ruled unconstitutional certain provisions of the law (e.g. the criminalization of spamming, the real time collection by police enforcement agents of “traffic data” upon their own determination of “due cause”, etc.) would not diminish the responsibility of these agencies in coming up with the timely and necessary IRR, since the affected rules could be amended later on to reflect the Supreme Court’s ruling.

These agencies also involved certain entities in its consultative process conducted last 2014, in order to come up with the IRR. But this consultation process which was not expressly sanctioned under the law, was done two years after the law was already passed. And even with this consultation, it took these agencies more than a year to finally release the IRR.

This is a matter that deserves judicial scrutiny. The judiciary must weigh all the factors bearing in mind that if they decide to excuse this, that would give all the more reason for government agencies to flout their power, and the judiciary would give the impression that they are authorizing these agencies’ irresponsibility and approve their non-observance of laws that they are meant to implement!

In all his lectures, Dr. Ramiscal has asked audiences of their stand on this issue. To those who believed that the Cybercrime Prevention Act is effectively implemented despite of what was NOT done by these agencies, they cannot come up with a clear articulate legal reason to support their position.

Even with the Supreme Court’s 2014 en banc ruling on some of R.A. 10175’s provisions, the law still contains legally objectionable features which had not been the subject of any petition, that if implemented, will certainly have deleterious effects on the legal rights of Philippine citizens, particularly those accused of cybercrimes, and telecommunication, internet and service providers, the details of some of which, were elucidated upon by Dr. Ramiscal in his lectures.

To those defense lawyers whose clients are the subject of pending cybercrime cases, who have come up to Dr. Ramiscal and asked his opinion, he has always said that this issue should be the preliminary question they should raise in their clients’ defense. In one of his dinners after his lectures, he was fortunate enough to discuss this issue with the powerhouse couple of Atty. Daryl Largo, a big-time legal practitioner in Cebu, and Atty. Joan Largo, who is currently the Dean of the University of San Carlos, and who represented the St. Theresa’s College (STC) in the now famous Vivares v. STC case.

Dr. Atty. Noel G. Ramiscal with mom, the University of San Carlos power couple Atty. Daryl and Joan Largo and two USC student leaders

Dr. Atty. Noel G. Ramiscal with mom, the University of San Carlos power couple Atty. Daryl and Joan Largo and two USC student leaders

This issue, as stated by Dr. Ramiscal, is an important threshold question that is significant due to the fact that the Cybercrime Prevention Act generally raised the penalty of any crime committed to, through, or via any computing system or e-device to one degree! Thus, it must be tested in court.

As always, Dr. Ramiscal would like to express his immense gratitude to the OSG, the UP IAJ, the IBP Iloilo Chapter, the IBP National, the IBP Nueva Ecija and IBP Batangas, for giving him this opportunity to present his views and insights on the state of cybercrime law in the Philippines. Utmost thanks goes out to Atty. Maricar Villanueva Hiballes, the beautiful and gracious IBP Iloilo Chapter President, the IBP Iloilo staff, the UP IAJ staff, and the wonderful and generous IBP Iloilo lawyers who truly welcomed Dr. Ramiscal!

Dr. Ramiscal dining with the elegant IBP Iloilo Pres. Atty. Hiballes, the lovely (ret) Judge Pison, and the wonderful staff of UP IAJ, SC and IBP Iloilo, Oct. 28, 2015

Dr. Ramiscal dining with the elegant IBP Iloilo Pres. Atty. Hiballes, the lovely (ret) Judge Pison, and the wonderful staff of UP IAJ, SC and IBP Iloilo, Oct. 28, 2015

Especial shout out to the lovely and vivacious (ret.) Judge Rose Pison, who is always a great dinner companion!

Grand thanks to the debonair and accommodating Atty. Bembol Castillo,

Dr. Atty. Noel G. Ramiscal with IBP Nueva Ecija President, Atty. Bembol Castillo

Dr. Atty. Noel G. Ramiscal with IBP Nueva Ecija President, Atty. Bembol Castillo

the IBP Nueva Ecija Chapter President, the IBP Nueva Ecija staff, Ms. Elisa Cruz, Mr. Joey Pastor (the SC monitor), and the kind and lively IBP Nueva Ecija lawyers!

Utter gratitude to the IBP Batangas President, Atty. Erwin Aguilera, and its Board of Directors,

Dr. Atty. Noel G. Ramiscal receiving a certificate of appreciation from IBP Batangas Atty. Pargas and staff, Ms. Aloria, Nov. 27, 2015

Dr. Atty. Noel G. Ramiscal receiving a certificate of appreciation from IBP Batangas Atty. Pargas and staff, Ms. Aloria, Nov. 27, 2015

the dapper Atty. Neil Adrian Pargas, the very helpful Ms. Tina Aloria and the whole IBP Batangas staff, Mr. Junrich, Mr. Jun, the SC monitor, and the precious Ms. Flora Arguson!

One of the best privileges of doing this tour is meeting and connecting with fellow MCLE lecturers like the marvelous Judge Charito Macalintal Sawali, and the brilliant Atty. Erickson H. Balmes (a man of many talents), with whom Dr. Ramiscal and his mom had several breakfast sharings. Greatest appreciation to Atty. Balmes,

Dr. Atty. Noel G. Ramiscal with fellow MCLE lecturer Atty. Erickson H. Balmes, IBP Batangas, Nov. 27, 2015

Dr. Atty. Noel G. Ramiscal with fellow MCLE lecturer, Atty. Erickson H. Balmes, IBP Batangas, Nov. 27, 2015

as well as the Eulo blend of coffee that he and his family cultivate and share with their friends! This would not be complete without the recognition of the indefatigable and truly exceptional Atty. Bono Adaza, who has attended two of Dr. Ramiscal’s recent MCLE lectures. To you sir, Mabuhay po kayo at Salamat po!

Dr. Ramiscal also acknowledges the vital partnerships the IBP Cebu Chapter (through its Board of Directors, its President, Atty. Malig-On, Jr., and its Treasurer, Atty. Misal Martin) established with the University of Cebu, the University of San Carlos and the South Western University, that allowed Dr. Ramiscal to share some of his knowledge, experience and fruits of his research with the wonderful and appreciative law students of these universities! God Thanks to all of you!

LAWBYTE 107: THE FALSE BASES FOR THE UNDULY RESTRICTIVE SOURCE CODE REVIEW GUIDELINES IMPOSED BY THE COMELEC, Copyright by Dr. Atty. Noel G. Ramiscal

Last September 10, 2015, in October 8, and 29, 2015, in November 12, 2015, in November 18, 2015, and in November 27, 2015, Dr. Atty. Noel G. Ramiscal took the rare opportunity of bringing to the attention of the lawyers in the Integrated Bar of the Philippines, Nueva Vizcaya Chapter, the Office of the Solicitor General (OSG) lawyers, the IBP Iloilo, IBP Nueva Ecija and IBP Batangas Chapters, in his Mandatory Continuing Legal Education (MCLE) lectures presented for them, and the students who attended his lecture in University of Cebu (UC) which ran for three hours, respectively, a little known and legally unexplored fact in the whole unfortunate saga of the source code reviews concerning the automated election systems, like the PCOS machines used by the Commission on Elections (COMELEC) in the 2010 and 2013 e-elections in the Philippines.

Dr. Atty. Noel G. Ramiscal's lecture on Pre-Trial and Trial Skills on E-Data for IBP Nueva Vizcaya, September 10, 2015

Dr. Atty. Noel G. Ramiscal’s lecture on Pre-Trial and Trial Skills on E-Data for IBP Nueva Vizcaya, September 10, 2015

In 2009, Atty. Harry H. Roque, Jr., who has achieved the reputation as a stalwart defender of the rights of the downtrodden, together with several others filed a case in the Supreme Court to stop COMELEC from continuing the May 10, 2010 automated elections for reasons that are beyond the purpose of this article. Atty. Roque, Jr. lost, and as expected, he filed a Motion for Reconsideration which the OSG, arguing for the COMELEC, opposed in its Comment. One of the issues raised in the Motion pertained to the source code review by legitimate Philippine source code reviewers who were not given the unfettered freedom to review the source codes which was given to the international certification entity hired by the COMELEC, Systest Labs Inc. which actually reviewed the source codes of the AES machines using its own tools and software in its own laboratory in Denver, Colorado. The OSG’s colourful response to this was:

To allow a free- for-all review of the source code as the petitioners would suggest is to encourage unscrupulous individuals or groups to make a mockery of our elections and allow them opportunity to change its results as they please. It bears stressing that the source code is the instruction that commands the machine to accept the ballot, to read and count the votes, to scan the ballots and transmit the results. To indiscriminately allow its review is tantamount to feeding the burglars the very fittings of the main door such that they would know the type of key to be used and make it easy for them to commit burglary…(The review) under a controlled environment (is necessary), if only to ensure that no scrupulous individuals or groups will be able to replicate the source code, tamper with it, intercept the machines and feed the PCOS machines with tampered source code. It is the public respondent COMELEC’s bounden duty to secure the PCOS machines, including the source code.

Dr. Atty. Noel G. Ramiscal making the point for the OSG lawyers that Copyright violations are inherent in legitimate source code reviews, Oct. 8, 2015

Dr. Atty. Noel G. Ramiscal making the point for the OSG lawyers that Copyright violations are inherent in legitimate source code reviews, Oct. 8, 2015

There were two reasons that could be gleaned from this response. The first is the popular concern that allowing an unfettered review would give the Philippine source code reviewers the chance to tamper with the source code and hence tamper with the election results. This immediately presumed bad faith on the part of the Philippine source code reviewers. This is contrary to the fact that the COMELEC had the power to vet the qualifications of the Philippine source code reviewers and to disallow any unscrupulous entities from accessing the source codes. In truth, the COMELEC’s actuations placed the source codes of the AES machines used in the 2010 elections beyond the review of any legitimate Philippine source code reviewer, even up to this very day.

The second, and seemingly reasonable reason, concerns the intellectual property rights (IPR) claims that Smartmatic-TIM apparently had on the source codes. This can be culled from the OSG’s reference to burglary, with the view that having access to the source codes can allow an IPR infringer to replicate and steal the source codes and use them for nefarious purposes.

Dr. Ramiscal explained to the OSG lawyers (as well as the IBP Nueva Vizcaya, Iloilo and Nueva Ecija lawyers), citing the evidence he gathered from his research project/book “Cryptology: The Law and Science of Source Codes and E-Secrets” that IPR infringements are evidently inherent in any legitimate, complete and credible source code reviews. Source codes that are subject to standard legitimate reviews are not given to source code reviewers in read copies only. The replication of source code parts, modifying them and even reverse-engineering them in the process of conducting a thorough source code review are to be expected, since legitimate source code reviewers will run the source codes through their software tools and programs, which was what Systest Labs Inc. did on its source code reviews for the AES machines used in the 2010 e-elections. Dr. Ramiscal, had discussed this in his Mandatory Continuing Legal Education (MCLE) lecture presented before the UP Institute of Administration of Justice way back in 2010.

Dr. Atty. Noel G. Ramiscal with some of the wonderful lawyers at IBP Nueva Ecija, Nov. 12, 2015

Dr. Atty. Noel G. Ramiscal with some of the wonderful lawyers at IBP Nueva Ecija, Nov. 12, 2015

Dr. Ramiscal also gave examples of procedures in the U.S., Canada, Australia, New Zealand and the United Kingdom, culled from his book, where entities that are allowed by law to conduct legitimate source code reviews of cryptographic products do so under the condition that the source code owners of these products give them the license to access the source codes and conduct their source code reviews with absolute freedom.

Dr. Atty. Noel G. Ramiscal with gorgeous IBP Batangas lawyers and staff, Nov. 27, 2015

Dr. Atty. Noel G. Ramiscal with gorgeous IBP Batangas lawyers and staff, Nov. 27, 2015

Finally, Dr. Ramiscal mentioned in his OSG lecture, the e-voting pilot tests in 2011 and 2013 in Norway where the government allowed any member of the populace in Norway, or anyone in the world for that matter, to access and download the source codes developed by Scytl, available on a government site, so the codes can be reviewed by all, and encouraged all the reviewers to publish their results.

Prior to the elections, the Norweigian government published versions of the source codes for all to access and review with the following notice:

Trust is vital for the Norwegian electoral system. It is therefore important that everyone who wishes to do so can find out how the system works. In order to safeguard this principle, the ministry is now publishing the source code for the e-voting system. In this way those who wish to do so, and who understand computer programming, can download it and inspect it. [Publishing is] one of several means to make it possible for outsiders to check how the elections are carried out (Pages 139 to 140, Dr. Ramiscal’s book, citation omitted).

Contrary to the sentiments expressed in the OSG Comment, the Norweigian government’s action did not lead to unscrupulous people opening up the “brain” of the AES machines and infecting it or tampering it to defeat the will of the electorate. The complete transparency and the allowance of the Norweigian government for the source code reviewers to publish their reviews led the Norweigian government to discontinue the e-voting for 2015 due to many documented findings about the source codes’ defects and the breaches in the security of the results and the privacy of the voters.

One of the major findings and recommendations in Dr. Ramiscal’s book was to view source code reviews done by any source code reviewer (whether from the Philippines or a foreigner) as an instance of fair use, or legitimize it by making it an exception to the strict copyright stranglehold provisions of the Intellectual Property Code of the Philippines.

Dr. Atty. Noel G. Ramiscal presented a Major Recommendation to the OSG lawyers on the matter of the source code reviews of the AES machines, Oct. 8, 2015

Dr. Atty. Noel G. Ramiscal presented a Major Recommendation to the OSG lawyers on the matter of the source code reviews of the AES machines, Oct. 8, 2015

In light of all these, Dr. Ramiscal opined that the new Guidelines issued by the COMELEC [COMELEC RESOLUTION 9987, September 14, 2015 {IN THE MATTER OF THE GUIDELINES IN THE CONDUCT OF THE SOURCE CODE REVIEW IN THE AUTOMATED ELECTION SYSTEM FOR THE 09 MAY 2016 NATIONAL AND LOCAL ELECTIONS}] basically culled from its 2010 and 2013 Guidelines, with its unduly restrictive procedures and non-disclosure agreements, are discriminatory, unjust and if followed would lead to sham source code reviews.

Dr. Atty. Noel G. Ramiscal's MCLE lecture on Electronic Evidence for IBP Iloilo, Oct. 29, 2015

Dr. Atty. Noel G. Ramiscal’s MCLE lecture on Electronic Evidence for IBP Iloilo, Oct. 29, 2015

In concluding this matter, Dr. Ramiscal specifically appealed to the OSG lawyers to rethink their agency’s position on source code reviews, and for all the lawyers in the IBP Chapters he was privileged to lecture for, to strive to keep abreast of the technological and legal developments in this area, so that they could better serve the cause of Truth and Justice in the Public Service and protect the True Will of the Philippine Electorate. A huge thanks to the OSG, UP IAJ, the IBP National, and the IBP Chapters of Nueva Vizcaya, Iloilo, Nueva Ecija and Batangas for allowing Dr. Ramiscal to share these with the lawyers who attended his lectures.

Dr. Atty. Noel G. Ramiscal receiving a certificate of appreciation from the gorgeous lady lawyers and officers of IBP Nueva Ecija, Nov. 12, 2015

Dr. Atty. Noel G. Ramiscal receiving a certificate of appreciation from the gorgeous lady lawyers and officers of IBP Nueva Ecija, Nov. 12, 2015

A mighty shout out goes to the IBP Cebu Chapter (especially to its Board of Directors, its President, Atty. Gonzalo Malig-on, Jr., and Treasurer, the ever gracious and lovely Atty. Mundlyn M. Martin), for co-sponsoring the lecture given by Dr. Ramiscal to the UC students, in partnership with the University of Cebu, represented by the Dean of College of Law, Atty. Baldomero Estenzo.

The University of Cebu Law School audience of Dr. Atty. Noel G. Ramiscal, Nov. 18, 2015

The University of Cebu Law School audience of Dr. Atty. Noel G. Ramiscal, Nov. 18, 2015

Heaps of appreciation as well to UC’s resident fashionista: the amazing Atty. Ria Espina, the wonderful Atty. Anne Tan, the marvellous Atty. Maricar Tallo, and the magnificent UC law students who apparently were not fazed nor tired by Dr. Ramiscal’s three hour lecture on the trends in cybercrime, cryptology and social media!