70. Disini v.

Secretary of Justice
TITLE JOSE JESUS M. DISINI, JR., ROWENA S. DISINI, LIANNE IVY
P. MEDINA, JANETTE TORAL and ERNESTO SONIDO, JR.,
Petitioners, vs. THE SECRETARY OF JUSTICE, THE SECRETARY
OF THE DEPARTMENT OF THE INTERIOR AND LOCAL
GOVERNMENT, THE EXECUTIVE DIRECTOR OF THE
INFORMATION AND COMMUNICATIONS TECHNOLOGY
OFFICE, THE CHIEF OF THE PHILIPPINE NATIONAL POLICE
and THE DIRECTOR OF THE NATIONAL BUREAU OF
INVESTIGATION, Respondents.

GR NUMBER G.R. No. 203335

DATE February 11, 2014

PONENTE ABAD, J.

NATURE/ Cybersecurity Law

KEYWORDS

FACTS Consolidated petitions seek to declare several provisions of

R.A. 10175, known as The Cybercrime Prevention Act of 2012
unconstitutional and void. This case holds a handful of
petitions seeking the removal of different sections deemed to
be infringing on privacy rights and more.

For instance, the focus is the creation of the “Cybercrime

Investigation and Coordinating Center” which, in the same
breath, promulgates powers and functions to the agents of
the said center. “Petitioners mainly contend that Congress
invalidly delegated its power when it gave the Cybercrime
Investigation and Coordinating Center (CICC) the power to
formulate a national cybersecurity plan without any sufficient
standards or parameters for it to follow.”

“Cybersecurity refers to the collection of tools, policies, risk

management approaches, actions, training, best practices,
assurance and technologies that can be used to protect cyber
environment and organization and user’s assets. This
definition serves as the parameters within which CICC should
work in formulating the cybersecurity plan.”
ISSUE(S) Whether or not the CICC is constitutional for it to operate
under delegated powers by Congress

RULING(S) Yes. “In order to determine whether there is undue delegation

of legislative power, the Court has adopted two tests: the
completeness test and the sufficient standard test. Under the
first test, the law must be complete in all its terms and
conditions when it leaves the legislature such that when it
reaches the delegate, the only thing he will have to do is to
enforce it. The second test mandates adequate guidelines or
limitations in the law to determine the boundaries of the
delegate’s authority and prevent the delegation from running
riot.

Here, the cybercrime law is complete in itself when it directed

the CICC to formulate and implement a national cybersecurity
plan. Also, contrary to the position of the petitioners, the law
gave sufficient standards for the CICC to follow when it
provided a definition of cybersecurity.”