The organisation must not, without right, input, alter or delete computer data to produce inauthentic data meant to be acted on as authentic, or knowingly use such data (forgery); input, alter or delete data or programs or interfere with a system causing damage with fraudulent intent (fraud); or intentionally acquire, use, misuse, transfer, possess, alter or delete identifying information of another natural or juridical person (identity theft), identifying information covering names, dates of birth, licence, passport and tax numbers, unique biometric data, electronic identification numbers, addresses or routing codes and telecommunication identifiers or access devices (IRR 3(y)). Penalty prision mayor or a fine of at least PHP 200,000 up to the damage caused, one degree lower if no damage; identity theft was upheld in Disini.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.