QuestionsQuestions (PHILIPPINE NATIONAL POLICE)
The Act is titled the “Philippine Identification System Act.” Its policy is to establish a single national identification system (PhylSys/PhilSys) to promote seamless delivery of services, improve efficiency and transparency, reduce corruption and red tape, avert fraudulent transactions, strengthen financial inclusion, and uphold people’s rights to privacy and confidentiality through a resilient digital system.
The PhilSys primarily provides a valid proof of identity for citizens and resident aliens to simplify public and private transactions and eliminate the need for other IDs, subject to authentication. It also serves as a social and economic platform to support seamless services and better governance, reduce corruption, strengthen financial inclusion, and promote ease of doing business.
It applies to all natural persons in all transactions where the PhilSys Number (PSN), PhilID, or biometric information is required, presented, or used, whether legally or illegally, within or outside the Republic of the Philippines.
Authentication is the process of verifying an individual’s identity (online or offline) against registry information in the PhilSys/PhilID. It is relevant because acceptance of the PhilID or PSN as proof of identity is subject to proper authentication.
A biometric exception refers to cases where a citizen or resident alien cannot provide a complete set of biometrics required by PhilSys but is nevertheless admitted into the system, subject to PSA guidelines.
It includes front-facing photograph, fingerprint(s) (full set of fingerprints), and iris scan, plus possibly other identifiable features if necessary and as determined in the implementing rules.
The PSN is a randomly generated, unique, permanent identification number assigned to every citizen or resident alien upon birth or registration by the PSA. All government agencies (including GOCCs) must incorporate the PSN in their identification systems/databases as the standard number for the individual across agencies.
An individual’s record in the PhilSys is considered an official and sufficient proof of identity.
It must show the PSN, full name, sex, blood type, marital status (optional), place of birth, front-facing photograph, date of birth, and address. It must match registered information in the PhilSys and include a QR code and security features.
The Act limits collected/stored information to (1) demographic data: full name, sex, date of birth, place of birth, blood type, address, citizen/resident alien status, marital status (optional), mobile number (optional), email (optional); and (2) biometrics: front photograph, full fingerprints, iris scan, and possibly other identifiable features if necessary as determined in the IRR.
Registration is deemed successful and complete upon issuance of the PSN and confirmation of registration by the PSA.
Registration centers include PSA regional/provincial offices; LCROs; GSIS; SSS; PhilHealth; HDMF; COMELEC; PHLPost; and other agencies/GOCCs assigned by PSA. For Filipino citizens abroad, registration is done at the nearest Philippine Embassy/Foreign Service post or other designated centers coordinated by DFA and PSA.
Any requesting entity must obtain the individual’s consent before collecting identity information for authentication. It must inform the individual about the nature of information that may be shared during authentication and the uses of that information by the requesting entity, and ensure the information is used only for the purpose it was required.
The PSN and biometrics authenticated through the PhilSys shall be honored and accepted notwithstanding the absence or non-presentation of a PhilID.
Section 17 generally prohibits disclosure, collection, recording, conveyance, dissemination, publication, or use of PhilSys information except with the registered person’s consent for the authorized purpose, and prohibits diversion to third parties beyond the person/entities authorized. It also declares unlawfully obtained information inadmissible in judicial/quasi-judicial/administrative proceedings. Section 18 requires PSA (with DICT technical assistance) to implement organizational, technical, and physical security measures, and allows use of aggregate data without identifying individuals while not limiting legally authorized sharing.
Refusal to accept/acknowledge PhilID or PSN as proof subject to authentication is punishable by a fine (P500,000). Unlawful use for fraudulent acts carries imprisonment and/or fines. More serious penalties apply for falsification/submission of fictitious/false information, unauthorized printing/issuance, tampering, unauthorized possession/transfer, and willful unauthorized data collection/use/disclosure, unauthorized access, or processing without authority, with higher penalties for malicious disclosure and for officials or employees depending on circumstances and roles.
PSA must implement PhilSys in a way that does not impede operations of existing card-issuing government agencies so as not to unduly delay public service. It must gradually synchronize and consolidate existing government-initiated identification systems into one integrated and interconnected system for easier, faster, reliable, and secure access.
Within sixty (60) days upon approval of the Act, the PSA in coordination with the PSPCC must promulgate IRR and exchange existing technologies and best practices on issuance of the PhilID/PSN, authentication, and data security.