Title
Vivares vs. St. Theresa's College
Case
G.R. No. 202666
Decision Date
Sep 29, 2014
Minors' Facebook photos, shared with "Friends Only" privacy, accessed by school for disciplinary action. Supreme Court ruled no privacy violation, upholding school's authority to enforce policies.
habeas data
privacy rights
minors
A

Case Summary (G.R. No. 202666)

Key Dates and Procedural Posture

Factual events occurred in January–March 2012 (photographs taken and school disciplinary action). Civil Case No. CEB-38594 (Petition for Injunction and Damages by Angela’s mother) filed March 23, 2012; TRO issued allowing attendance at commencement; STC nonetheless barred students. Petitioners filed Petition for Writ of Habeas Data (SP. Proc. No. 19251-CEB). RTC issued the writ but subsequently dismissed the habeas data petition by Decision dated July 27, 2012. Petitioners appealed to the Supreme Court; the Supreme Court denied the petition and affirmed the RTC Decision (G.R. No. 202666).

Applicable Law and Constitutional Basis

Governing instruments: the 1987 Philippine Constitution (applicable because the decision is from 2014) and the Rule on the Writ of Habeas Data (A.M. No. 08-1-16-SC). The writ of habeas data is a summary remedy available to any aggrieved party whose right to privacy in life, liberty, or security is violated or threatened by unlawful acts or omissions of public officials or private individuals/entities engaged in gathering, collecting, or storing information. The Rule requires both (1) entitlement to informational privacy and (2) a showing, at least by substantial evidence, of an actual or threatened violation of the right to privacy in life, liberty, or security as preconditions to issuance.

Facts Relevant to the Petition

Two graduating high school minors and several classmates took digital photographs in undergarments prior to a beach party; Angela uploaded these photos to her Facebook account. STC teacher Escudero learned of the photos from students, viewed copies shown to her on students’ own Facebook accounts at the school computer lab, and reported them to STC officials. STC investigated and found the identified students to have violated the Student Handbook and levied sanctions including barring participation in commencement. Petitioners allege: (a) the minors’ Facebook accounts were set to “Friends Only” or otherwise private; (b) Escudero and other STC personnel intruded into the minors’ Facebook accounts, saved and reproduced the photos without consent; and (c) the school broadcasted the images, including appending photos to a memorandum filed in court.

Procedural History in the Courts Below

The RTC found the petition sufficient in form and issued a writ of habeas data in an initial order but, following returns, dismissed the petition on July 27, 2012. The RTC concluded petitioners failed to prove an actual or threatened privacy violation: the photos either had been publicly viewable on Facebook or were accessed by persons who legitimately had access; STC’s gathering of the material was for lawful disciplinary purposes and through lawful means. Petitioners elevated the matter to the Supreme Court under Section 19 of the Rule on Habeas Data.

Issue Presented

Whether the writ of habeas data should issue because of an actual or threatened violation of the minors’ right to informational privacy in life, liberty, or security, given the circumstances of the Facebook-posted photographs and subsequent handling by STC and its officials.

Scope and Purpose of the Writ of Habeas Data

The Supreme Court emphasized that the writ is not confined to cases of extralegal killings or enforced disappearances; it is an independent remedy designed to protect informational privacy and the right to control personal information. The Court reiterated the Rule’s text that the remedy is available against unlawful acts or omissions of public officials or private individuals/entities “engaged in the gathering, collecting or storing of data or information” regarding the person, family, home, and correspondence of the aggrieved party. Habeas data therefore serves as a procedural tool to update, rectify, suppress, or order destruction of improperly held data and to secure informational privacy.

Meaning of “Engaged in the Gathering, Collecting or Storing of Data”

The Court clarified that “engaged” does not limit the writ to entities whose business is data gathering or storage. “Engaged” simply means “to do or take part in” such activities. A person or entity that, even in the course of non-business or ad hoc activity, gathers, collects, stores, or reproduces data about an individual may fall within the writ’s scope. Restricting the writ to professional data handlers would unduly narrow its protective reach in the information age.

The Right to Informational Privacy in Online Social Networks (OSNs)

Informational privacy was described as the individual’s right to control information about oneself. The Court recognized that OSNs, like Facebook, are designed to promote sharing and social interaction and that technological and social realities affect reasonable expectations of privacy. Nevertheless, the existence of an expectation of informational privacy in OSN activities is possible and depends on whether the user manifests an intention to limit disclosure—principally by employing available privacy tools. The writ will not issue merely because of unauthorized access; a petitioner must show both entitlement to informational privacy and substantial evidence of actual or threatened infringement of life, liberty, or security.

Facebook Privacy Tools and Their Legal Significance

The Court analyzed Facebook’s privacy settings (Public, Friends of Friends, Friends, Custom, Only Me) as tools permitting users to limit visibility of content. Use of these tools is the cyberspace analogue of asserting a private zone: selecting a restrictive setting constitutes a manifestation of the intention to keep content private. The Court emphasized that users who employ meaningful privacy restrictions (e.g., Only Me, properly configured Custom lists, or otherwise screening contacts) demonstrate a stronger claim to a protected expectation of informational privacy.

Application of the Standards to the Case Facts: Expectation of Privacy

The Court applied the foregoing principles and found petitioners failed to establish that the minors had placed the photos within a protected zone of privacy. The minors’ testimonies that the photos were viewable by only five persons were uncorroborated and contradicted by the undisputed fact that other students showed their accounts to Escudero using their own Facebook logins. Escudero’s affidavit that students demonstrated access to the photos using their own accounts and that the photos had at times been publicly viewable was unchallenged. Given Facebook’s default public setting and the absence of proof that the uploader used restrictive settings effectively (such as “Only Me” or carefully curated “Custom” lists), the Court concluded petitioners could not establish an objectively reasonable expectation of privacy in the images.

Accessibility of “Friends Only” Content and Third‑party Sharing Risks

The Court recognized that “Friends Only” settings do not ensure privacy because (a) users routinely befriend strangers; (b) a large number of friends multiplies exposure; and (c) friends can share or tag content so that it reaches others outside the original friend circle. Thus, even content visible only to “Friends” may be disseminated beyond the intended limited audience, and a user’s reliance on “Friends Only” is not per se sufficient to establish the protected zone required for habeas data relief absent evidence of stricter protective measures.

Lawfulness of STC’s Conduct and the Nature of the Alleged Disclosure

The Court found that STC personnel did not access the minors’ Facebook pages through special illicit means; they received the images from students who had

...continue reading

Analyze Cases Smarter, Faster
Jur helps you analyze cases smarter to comprehend faster, building context before diving into full texts. AI-powered analysis, always verify critical details.

About Privacy Terms