Assessing compliance of Philippine state universities to the data privacy act of 2012: the case of Caraga State University

The Philippine Data Privacy Act of 2012 (DPA of 2012) defined the rights of Filipino citizens to data privacy and created the National Privacy Commission to monitor compliance, by both public agencies and private organizations, to the said law to ensure data protection and rights of privacy of its citizens. This study aims to explore and explain why and how public universities of the Philippines, with the Caraga State University as the subject, would comply with DPA of 2012. Using a single case holistic design with common rationale, and pattern matching as an analytic technique as adapted by Yin's method and design. This study has shown that the e-Commerce Act, another law legislated previously, is a moderating factor in compliance with the Data Privacy Act, and that general deterrence and legitimacy of regulations has a compelling casual effect on complying with the DPA of 2012. Factors such as (1) lack of awareness, (2) lack of resources, and (3) low priority in the agenda are found to be critical factors in complying with DPA of 2012. It was also found that the Caraga State University is only partially compliant (Medium-High) to the provisions of DPA 2012.