Section 4. Cybercrime Offenses.
A. Offenses against the confidentiality, integrity and availability of computer data and systems shall be punished with imprisonment of prision mayor or a fine of at least Two Hundred Thousand Pesos (P200,000.00) up to a maximum amount commensurate to the damage incurred, or both, except with respect to number 5 herein:
1. Illegal Access – The access to the whole or any part of a computer system without right.
2. Illegal Interception – The interception made by technical means and without right, of any non-public transmission of computer data to, from, or within a computer system, including electromagnetic emissions from a computer system carrying such computer data: Provided, however, That it shall not be unlawful for an officer, employee, or agent of a service provider, whose facilities are used in the transmission of communications, to intercept, disclose or use that communication in the normal course of employment, while engaged in any activity that is necessary to the rendition of service or to the protection of the rights or property of the service provider, except that the latter shall not utilize service observing or random monitoring other than for purposes of mechanical or service control quality checks.
3. Data Interference – The intentional or reckless alteration, damaging, deletion or deterioration of computer data, electronic document or electronic data message, without right, including the introduction or transmission of viruses.
4. System Interference – The intentional alteration, or reckless hindering or interference with the functioning of a computer or computer network by inputting, transmitting, damaging, deleting, deteriorating, altering or suppressing computer data or program, electronic document or electronic data message, without right or authority, including the introduction or transmission of viruses.
5. Misuse of Devices, which shall be punished with imprisonment of prision mayor, or a fine of not more than Five Hundred Thousand Pesos (P500,000.00), or both, is committed through any of the following acts:
a. The use, production, sale, procurement, importation, distribution or otherwise making available, intentionally and without right, of any of the following:
i. A device, including a computer program, designed or adapted primarily for the purpose of committing any of the offenses under this rules; or
ii. A computer password, access code, or similar data by which the whole or any part of a computer system is capable of being accessed with the intent that it be used for the purpose of committing any of the offenses under this rules.
b. The possession of an item referred to in subparagraphs 5(a)(i) or (ii) above, with the intent to use said devices for the purpose of committing any of the offenses under this section.
Provided, That no criminal liability shall attach when the use, production, sale, procurement, importation, distribution, otherwise making available, or possession of computer devices or data referred to in this section is for the authorized testing of a computer system.
If any of the punishable acts enumerated in Section 4(A) is committed against critical infrastructure, the penalty of reclusion temporal, or a fine of at least Five Hundred Thousand Pesos (P500,000.00) up to maximum amount commensurate to the damage incurred, or both shall be imposed.