Compliance performance of a large local company to electronic commerce act of 2000 and data privacy act of 2012: a case study approach

Abstract

Electronic commerce and data privacy have become a very important aspect of performing business in the Philippines. This research study aims to ascertain the compliance performance of a large local company to the Electronic Commerce Act of 2000 (R.A. 8792) and Data Privacy Act of 2012 (R.A. 10173). Through Outcome Pattern Matching, it has been determined that, though the company is fully compliant with the applicable sections of R.A. 8792, it is Partially Compliant (High) to R.A. 10173 with few challenge areas. Using Benchmarking Process, this research study also recommends factors that could improve the compliance performance of the company. The following dimensions should be considered: (1) spontaneous compliance, (2) control and (3) sanctions. Further, the company should take into account not just the legal aspects of the Republic Acts but also the value-based ethics and business case of compliance.