The recent data breach at Jollibee, affecting the personal information of 11 million customers, is a glaring example of the incompetence of the Department of Information and Communications Technology (DICT) and the Cybercrime Investigation and Coordination Center (CICC). Despite the urgency of cybersecurity threats, these agencies have failed to implement clear, effective technology programs to protect citizens’ data.
One of the most significant issues is the lack of competent IT experts within these agencies. Without qualified professionals who understand the complexities of modern cybersecurity, the DICT and CICC are ill-equipped to develop and enforce robust data protection policies. Moreover, the technology training for government IT practitioners is outdated, leaving them unable to address contemporary cyber threats effectively.
This incompetence and lack of preparedness contribute directly to the vulnerability of our data. Incidents like the Jollibee breach, rampant phishing and smishing attacks, and the general prevalence of cyber scams highlight the systemic failures within our cybersecurity infrastructure.
While we have legislation like the Data Privacy Act of 2012 and the SIM Registration Act of 2022, these laws are rendered ineffective by the poor implementation and oversight by the DICT and CICC. Without significant improvements in the competency of these agencies, including hiring skilled IT professionals and providing continuous, up-to-date training, we will continue to see data breaches and cyber scams proliferate.
It’s high time the government took decisive action to overhaul its approach to cybersecurity. This includes not only enhancing the capabilities of the DICT and CICC but also prioritizing the protection of citizens’ data through proactive and clear technology programs. Without such reforms, the safety of our personal information remains in jeopardy, and public trust in digital services will continue to erode. (RAFFY GUTIERREZ)
