Can DTI Subpoena Errant Online Sellers?
Introduction
Online fraud investigations often depend on records held by sellers, e-marketplaces, digital platforms, payment providers, and other technology companies. These records may identify the persons behind fraudulent listings, establish how transactions were conducted, and show the movement of consumer information or payments.
The Internet Transactions Act gives the Department of Trade and Industry (DTI) investigative powers that include issuing summonses and subpoenas. These powers support investigations involving violations of the Act, the Consumer Act of the Philippines, and other trade and consumer-protection rules administered by the DTI.
However, the statutory authority belongs to the DTI Secretary. The E-Commerce Bureau performs the investigative and administrative functions assigned under the law, but a subpoena must be issued within the authority granted by the statute and must comply with its substantive limits.
What Law Governs DTI Subpoenas?
The principal statute is the Internet Transactions Act of 2023, or R.A. No. 11967. Section 13 authorizes the DTI Secretary, in the exercise of powers under the Act, to issue summonses, subpoena ad testificandum, and subpoena duces tecum to alleged violators or witnesses.
A subpoena ad testificandum compels a person to attend and testify. A subpoena duces tecum compels the production of identified books, records, electronic files, transaction histories, or other documents relevant to the investigation.
The law also permits the filing of a contempt case under the Rules of Court when a person fails to comply with a subpoena ad testificandum or subpoena duces tecum. The contempt consequence is therefore not an automatic administrative penalty imposed merely because a subpoena was issued; it involves the proper legal process for addressing noncompliance.
Who May Issue the Subpoena?
Under Section 13 of R.A. No. 11967, the statutory issuing authority is the DTI Secretary. The provision does not describe the E-Commerce Bureau as an independent judicial body with unrestricted subpoena power.
Accordingly, an investigation may be conducted through the E-Commerce Bureau, but the subpoena must be traceable to the authority of the DTI Secretary and the powers granted by the Act. Any delegation or internal issuance procedure should be examined against the statute, its implementing regulations, and the DTI’s written authority.
This distinction matters because an administrative agency may exercise only powers granted by law. In The Presidential Anti-Dollar Salting Task Force v. Court of Appeals, G.R. No. 83578, 1989, the Supreme Court emphasized that governmental powers cannot be exercised by an officer or body lacking legal authority to perform them. The case also illustrates the constitutional importance of neutrality and lawful delegation when coercive investigative powers are involved.
What May the DTI Demand?
A subpoena may require testimony or the production of documents relevant to an investigation before the Bureau. Depending on the allegations, potentially relevant material may include:
- seller registration details and government identification information;
- listing, product, pricing, and promotional records;
- orders, invoices, delivery records, refunds, and complaints;
- communications and account information relating to the transaction; and
- corporate records identifying the persons responsible for the online business.
The requested material must remain connected to the investigation. Section 13 provides that a subpoena duces tecum is valid when it concerns matters within the DTI’s jurisdiction, is reasonably relevant to the subject under investigation, and designates or describes the information or document sought in a manner that allows it to be identified.
Requirements for a Valid Subpoena Duces Tecum
The statutory test has three cumulative requirements.
First, jurisdiction. The subpoena must concern a matter within the DTI’s authority. The DTI may investigate violations of the Internet Transactions Act, the Consumer Act of the Philippines, and applicable trade and consumer-protection issuances promulgated by the DTI.
Second, reasonable relevance. The requested information must reasonably relate to the subject of the investigation. A demand for records having no connection with the alleged online transaction, seller, consumer complaint, or regulatory violation may be vulnerable to challenge.
Third, reasonable identification. The subpoena must designate or describe the requested information or documents sufficiently for the recipient to determine what must be produced. A demand that effectively requires the recipient to surrender every record in its possession, without identifying the subject matter or relevant period, raises a serious legal concern.
Subpoenas Directed Against E-Marketplaces and Digital Platforms
The Internet Transactions Act imposes separate obligations on e-marketplaces and other digital platforms. An e-marketplace must maintain a list of online merchants registered on its platform and regularly update and verify the information provided by those merchants.
When an e-marketplace is being used in the commission of a crime, or as a means to commit a malicious, fraudulent, or unlawful act, it may be required to provide specific information upon issuance of a subpoena by a competent authority. The investigation must be based on a sworn complaint stating that the complainant cannot ascertain the perpetrator’s identity.
Similar obligations apply to certain digital platforms that do not retain oversight over the consumption of the transaction. These platforms must maintain, as far as practicable, an updated list of accounts used for e-commerce and may be required to provide specific information upon issuance of a subpoena by a competent authority, subject to the statutory conditions.
The subpoena power may therefore be particularly useful where the consumer knows only the seller’s username, account name, listing, telephone number, or platform profile, but does not know the seller’s true identity.
Privacy and Data-Protection Limits
E-marketplaces and digital platforms remain subject to the Data Privacy Act of 2012, or R.A. No. 10173, and issuances of the National Privacy Commission. The Internet Transactions Act expressly requires these entities to take necessary precautions to protect consumer data and comply with applicable information-security standards.
A subpoena does not eliminate the obligation to handle personal information lawfully. The recipient should disclose only information covered by the subpoena and should preserve the confidentiality and security of records not lawfully required to be produced.
Where the investigation concerns computer data in a criminal cybercrime proceeding, the appropriate judicial warrant procedure may also apply. The Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, 2018, distinguishes among warrants to disclose, intercept, search, seize, and examine computer data. A DTI administrative subpoena should not be treated as a substitute for a court-issued warrant when the law requires judicial authorization for the particular investigative act.
Subpoenas Compared With Compliance and Takedown Orders
A subpoena and a takedown order serve different purposes.
A subpoena compels testimony or the production of information and documents for an investigation. A compliance order requires conformity with the Internet Transactions Act, the Consumer Act of the Philippines, or applicable DTI trade and consumer-protection issuances.
A takedown order removes an online listing or offer. Under Section 15 of R.A. No. 11967, the DTI Secretary may issue an ex parte takedown order after investigation or verification when, among other circumstances, the online sale involves prohibited or regulated goods apparent from the listing, concerns goods subject to a cease-and-desist order, involves reposted material previously subject to a takedown order, or threatens public or personal safety or compromises financial or personal information.
The violating entity must be given an opportunity to be heard within forty-eight hours from issuance of the takedown order. The order may remain effective for a maximum of thirty days unless extended or made permanent by judicial order or decision.
These forty-eight-hour and thirty-day periods apply to the statutory takedown process. They do not establish a general response period or duration for every subpoena issued during a DTI investigation.
What Happens If the Recipient Refuses to Comply?
Section 13 provides that failure to comply with a subpoena ad testificandum or subpoena duces tecum authorizes the filing of a contempt case under the Rules of Court. The recipient should not simply disregard the subpoena, particularly where the demand is facially valid and concerns matters within DTI jurisdiction.
A recipient that believes the subpoena is defective should promptly evaluate whether the demand lacks jurisdictional basis, reasonable relevance, or sufficient description of the requested material. It may then raise the objection through the proper administrative or judicial remedy rather than refusing compliance without explanation.
The DTI, for its part, should identify the investigation, explain the connection between the requested information and the alleged violation, describe the requested records with reasonable precision, and observe applicable confidentiality and data-protection requirements.
Corporate Records and Identifying the Responsible Seller
Corporate records may be important where an online seller operates through a company, marketplace account, payment account, or logistics arrangement different from the name shown to consumers. Records may help determine the corporation’s registered identity, responsible officers, authorized account users, and relationship with the relevant digital platform.
The request must still satisfy the statutory relevance and identification requirements. A subpoena for corporate documents should specify the entity, account, transaction, complaint, or period involved and should avoid demanding unrelated business records.
In an investigation involving several accounts or sellers, separate descriptions may be preferable to a single unrestricted demand. This makes the scope of the investigation clearer and reduces disputes over whether the production request is overbroad.
Illustrative Investigation
Suppose a consumer pays for a product advertised through an online marketplace, but the seller disappears after receiving payment. The consumer has only the seller’s username and platform profile, while the marketplace possesses registration information, contact details, transaction records, and account history.
If the matter involves a sworn complaint alleging a fraudulent or unlawful use of the platform and the complainant cannot identify the seller, the DTI may investigate and issue a subpoena within the authority of Section 13. The subpoena should identify the seller account, the transaction or complaint involved, the relevant records, and the reason the records are reasonably necessary to the investigation.
The marketplace must also continue to comply with its duties under the Internet Transactions Act and the Data Privacy Act. Disclosure should be limited to the information lawfully required and should be carried out through secure procedures.
Guidance for Online Sellers and Platforms
Online sellers should preserve transaction records, maintain accurate registration details, designate an authorized compliance officer, and respond promptly to lawful DTI processes. A seller should not alter, destroy, or conceal records relevant to an investigation.
E-marketplaces and digital platforms should maintain reliable merchant records, establish procedures for receiving and authenticating subpoenas, preserve relevant data, and document the scope of every disclosure. They should also assess whether the request concerns information that may be disclosed under the Internet Transactions Act or instead requires a judicial warrant.
Investigators should distinguish administrative fact-finding from criminal evidence-gathering. Where the requested act involves interception, search, seizure, or examination of computer data covered by the Rule on Cybercrime Warrants, coordination with the appropriate law-enforcement agency and application to the proper court may be necessary.
Conclusion
The DTI has statutory authority to compel testimony and relevant documents in investigations of online sellers and digital fraud. Under Section 13 of R.A. No. 11967, a subpoena duces tecum must concern a matter within DTI jurisdiction, seek information reasonably relevant to the investigation, and describe the requested information or documents sufficiently for identification.
The E-Commerce Bureau may serve as the investigative arm for internet-transaction enforcement, but the subpoena must rest on the authority granted to the DTI Secretary and must observe statutory, constitutional, procedural, and data-protection limits. A subpoena is an investigative tool, not a substitute for a judicial warrant when the law requires court authorization.
For online sellers and platforms, the sound response is to preserve relevant records, verify the legal basis and scope of the demand, protect unrelated personal information, and raise specific objections through the proper process when the subpoena exceeds lawful authority.
About Nicolas and De Vega Law Offices
Nicolas and de Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.
