Section 23Sec./Art. 23

Data and Information Security. - All resources, information, or data stored in or transmitted through the government information systems and all networks interconnected to and interoperable with it, the portals, and websites shall be kept secure and free from interference or unauthorized access that can hamper or otherwise compromise the confidentiality, integrity, and availability of the ICT assets.

Access to and use of the resources, information, and data in the government information systems shall be limited to the government and its duly authorized officers and agents, in accordance with all relevant laws, rules, and regulations on data and information privacy and the pertinent rules on confidentiality of government information: Provided, That the data used by all concerned government agencies, office, and instrumentalities with access to information systems and used data stored therein shall be destroyed or disposed of in accordance with acceptable standards and guidelines existing under the law for disposal of data upon fulfillment of its purposes.

Any person who shall knowingly commit an act which results to the compromise of the security and integrity of the government information systems and all networks interconnected to and interoperate with it, to the detriment of the government and the public shall incur criminal liability in accordance with the provisions of applicable and relevant penal laws.