REVISED IMPLEMENTING RULES AND REGULATIONS OF REPUBLIC ACT NO.11055 OTHERWISE KNOWN AS THE “PHILIPPINE IDENTIFICATION ‘SYSTEM ACT” Pursuant to R.A. No. 11055, enitled “An Act Establishing the Philippine Identification System, otherwise known as the "Philippine denification System Act’, the Philippine Statistics Authority (PSA) is mandated to carry out the provisions of the Act, and to issue, in coordination with the memaers of the PhilSys Policy and Coordination Council (PSPCC), rules in the implementation and enhancement of the PhilSys, hence, the following revised rules and requiations are hereby promulgated RULE! GENERAL PROVISIONS. SECTION 1. Title These rules and regulations shall be known as the "Revised Implementing Rules and Regulations of the Phiippine Identification System Act’. or the IRR" SECTION 2. Scope This IRR shall apply to all persons involved in the creation, operation, and maintenance of the Philippine Identfication System (PhilSys), the registration in PhilSys and in all transactions where the PhilSys Number (PSN), Philippine !denification Card (PhillD), or biometric information i$ required, presented, or used, ‘whether legally or ilegally, within or outside the Republic ofthe Philippines. SECTION 3. Objectives The objectives of this IRR are stipulated under Section 2 (Declaration of Policies) {and Section 3 (Objectives) of the Philippine deniiation System Act, to wit . to establish a single identification system for all ctizens and resident sons, ». to provide a valid proof of identity for alletizens and resident aliens as a ‘means of simplifying public and private transactions © {0 eliminate the need to present other forms of identification when transacting with the government and the private sector, subject to the appropriate authentication measures based on biomattic identification system: 4. to be a social and economic platform through which all transactions including public and private services can be availed: and Pages of 20,to promote seamless service delivery, enhancing administrative ‘governance, reducing corruption, strencthening financial inclusion, and promoting ease of doing business, SECTION 4. Definition of Terms. For purposes of this IRR, the following definition of terms are hereby adopted! a. Authentication refers to the process of verfying whether online or offline, the identity of an individual against the registry information in the PhilSys or PhillD. (1) Online authentication refers to the process by which the identity of an individual is validated real-time against the PhilSys Registry by the relying party through the use of an online medium and secured ‘connectivity and (2) Offine authentication refers to the process by which the identty of ‘an individual is validated against “he information contained in the PhillD by the relying party b. Biometric Exceptions refer to instances whereby there is physical impossiilty on the part ofa ctzen or res dent alien to give a complete set ‘of biometic information or ifthe complete set does not meet the minimum threshold standards, but is nevertheless registered inthe PhilSys ©. Biometric Information cefers to front-facing photograph, fingerprints, and iris scan as stated in Section 7.8 ofthis IRR. 4, Cardholder refers to a citizen or residert alien who has been registered under the PhiSys and who has been issuad and thus, in possession of the Philippine Identfication Cav. ©. Gitizen refers to a Filpino cizen, as defied in the Constitution, including those with dual or multple citzenships, in accordance with Republic Act No. 9225, otherwise known as. the "izenship Retention and Re- ‘acquisition Act of 2003 1. Consent refers to a freely given, specitic, informed indication of wil, whereby the registered person agrees to the processing of his personal information in transactions requiing his or her consent as stated in this, RR. Consent shall be evidenced by written, electronic, of recorded means. It may also be given on behalf of the registered person by an agent specifically authorized by the registered person to do so. 9. Electronic Know Your Customer (e-KYG) refers to the digital version of know your customer (KYC) which aims to collect certain information of an individual for the purpose of authenticating the same. hh, Mobile Registration refers to transportable registration centers utilized by the PSA and other agencies assigned byt to cater to citizens and resident aliens. Page 2 of 20Personal Information refers to any infsrmation whether recorded in a ‘material form or no, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, of when put together with other information would directly and certainly identify an individual as defined in Republic Act No. 10173, ‘otherwise known as the “Data Privacy Act of 2012". For purposes of this ‘Act, personal. information includes. sensitve personal information, as defined under the Data Privacy Act of 2012, Philippine Embassy or Philippine Foreign Service Post refers to diplomatic mission of consular office of the Republic ofthe Philippines in a foreign country, including the economic and cultural office of the Philippines, or the lke, ina foreign tectoy, PSN Derivative refers to the act of assigning a randomly generated, unique and replaceable set of identfication numbers, characters, symbols ‘or combination thereof which shall serve as a substitute to’mask or represent the PSN, such as but not limited to Phisys Card Number, alyas PSN andlor tokens. Record History refers to an entry in the PhilSys consisting of the information regarding a registered person in connection with his or her teniries inthe system and his or her PhilD, as follows: (1) Date of filing of the application for registration and the particulars thereof, (2) Date of fling of every application for modification and the particulars thereof, (3) Modification of entry made, the dete such modification was made, and the documents or other proof presented in support thereof. (4) Reason’s for the omission of any entry; (6) Dates of issuance, reissuance, and cancellation of the PhilD, and including the reasons therefor, (6) Details of authentication requests processed by the PSA which shall be limited to: iL the date the request was made and processed by PSA; iL the relying party, and ii, the response provided by Phisys, (7) Disclosure, conveyance, dissemination, publication, and use of information by third partes; and (8) Other relevant information as detemined necessary and approved by the PSPCC regarding the registration, modification, and Page 3 20authentication of personal informaton of a citizen or resident alien Under this Act. 'm. Registered information refers to any porsonal information regarding a citizen or resident alien recorded in the PhiiSys, including biometric. information and information about a citizer or resident alien required under the Act to be recorded in the PhitSys 1. Registered Person refers to @ person wha has been registered in the PhilSys. 0. Registration refers tothe process of entering demographic and biometric Information of citizens or resident aliens inthe Philippines to the PhilSys. P. Registration Centers refer to necessary facilities to capture both ‘demographic and biometric information required for PhiSSys as provided in Section 8.4 ofthis IRR, 4. Relying Party refers to a service provider which may either be a public of private entity, who relies on any PhifSys-enabled service, such as ‘authentication or any other process that identifies and verifies the identity oftheir customers, Resident Alien refers to an individual who is not a citizen of the Philippines but has the appropriate proof of established residence in the Philippines for an aggregate period af more than one hundred eighty (180) days within one (1) year prior to the date of application in the Phils 8. Trusted Service Provider refers to an enity, which may ether be a public or private entity, accredited by PhilSys and engaged by a relying party to provide assistance in the PhilSys' authertication or any PhilSys-enabled service RULE It THE PHILIPPINE IDENTIFICATION SYSTEM, ‘SECTION 5. The Philippine Identification System (PhilSys) The Philippine Identification System (PhiSys) is the government's central ‘dentfication platform for all citizens and resident allens of the Philipines. An individual's record in the PhilSys shall be considered as an official and sufficient proof of identity SECTION 6. Philippine Identification System Components, “The PhilSys shall have the folowing key components: ‘A. PhilSys Number (PSN) ~ The PSN is a randomly generated, unique, and. permanent identification number that wil be assigned to every citizen or Gos" Page 20resident alien upon bith or registration bythe PSA, in accordance with the registration process provided in this IRR. All government agencies, including government-owned or controled corporations (GOCCS) ‘shall incorporate in their identification systems and databases the PSN, or its derivative, of covered individuals which shall be the standard number for the individual across all agencies ofthe government ‘The PSN shall not be pre-determined or pre-assigned to any individual Neither shall any individual be alowed to choose his or her PSN, No person shail have more than one PSN. The PSN, in print, electronic or ‘any other form, subject to authentcatio, shall be accepted as sufficient roof of identity PhilSys Registry ~ The PhilSys Registry contains the PSN, the registered ‘records, record history, and registered information of all registered persons, in the PhilSys. Registered records shal pertain to electronic copies of ‘Completed application forms submitted during registration and succeeding Updates. Provided, that application form shall include digital forms in the: pre-registration system to be used in the registration process. ‘The information in the PhilSys Registry shall be classified in a manner that allows safeguards for data privacy and security, access controls, and change management, asset inthis IRR. ‘The PhilSys Registy shall be kept, owned, managed, and administered by the PSA separate and distinct from all other databases of the PSA and registration centers. Phill — The Phil is a nontransferabe card that shall preferably be issued to al cizens or resident aliens registered in the PhlSys subject to the guidelines tobe issued by the PSA, (1) Features. The PhillD shall be the physical medium issued to convey essential information abou! the person's identity containing on its face his or her PSN, full name, sex, date of bith, place of birth, blood type, address, marital status (f declared), and a front- facing photograph Al information appearing in the PhilD should match with the registered information in the PhilSys. the Phill shall contain a QR ‘cade which contains some fingerpint information and other security features as safeguards for deta privacy and security, and Prevention against the prolferaion of fraudulent of ‘falsified identification cards, ‘The production and security cf the Phil will be utlizing technological advances which ae on a par with intemational standards, ages of 20 (oe(2) Purpose. The PhillD shall serve as the official government issued ‘dentication document of cardholders in dealing with all national goverment agencies, local government units (LGUs), government: ‘owned oF controled corporations GOCCs), goverment financial institutions (GFls), State Universities and Coleges (SUCs), and all private sector entities. (3) Fees. The inital application and issuance as well asthe renewal of the PhillD for citizens shall be free of charge. Renewal shal pertain to the replacement ofthe PhillD arising from recapturing or updating (of biometric information, Fees for the (a) intial application and issuance as well as renewal (or reactivation of a PhillD to resident aliens, and (b) issuance of a replacement PhilD to citizens and resident aliens due to loss, damage, change of entries therein shall be subject to the schedule of fees to be issued by the PSA Fees however, shall not apply to citzens upon presentation of a Certificate of Indigency issued by the City/Municipal Social Welfare Offic. ‘SECTION 7. PhilSys Registry Data Information to be collected from the applicant and stored in the PhilSys shall be limited tothe folowing ‘A. Demographic Data (1) full name; 2) sex @) date of birth (4) place of bith; (6) blood type; (6) address 6.2. permanent address 6. present address (optional), (2) Filipino or Resident Alen (8) marital status (optional) (8) mobile number (optional); and, (10) e-mail address (optional, Full name, sex, date of bith, and place of birth shall at all times be consistent with the supporting documents presented under Section 8.C hereof, or a8 deciared and attested by the Introducer under Section &.C.4 B, Biometric Information (1) front-facing photograph; (2) fullset of fingerprints, and @)iisscan wb~ Page 6 of 20In case of visual or physical impairment that renders the capturing of the complete biometric information of the person applying for registration impossible, biometric ‘exceptions shall be employed and alowed by the PSA, ‘The captured biometric information and the acquired blometric data should conform to relevant intemational standards as determined by the PSA, SECTION 8. Registration A. Registration Centers Every citizen or resident alien shall register personally in any of the following registration centers that have the necessary faciities to capture the information Fequired to be contained in the registy. These registration centers shall be made available one year ater the effectivity of this Act: 4, PSA Regional and Provincial Offices; 2. Local Civil Registry Offices (CROs): 3. Government Service Insurance System (GSIS) for its members and their dependents: Social Security System (SSS) for its members and their dependents; Philippine Health Insurance Corporatio (PhilHealth), Home Development Mutual Fund (HOM) Commission on Elections (COMELEC) Philippine Postal Corporation (PHLPo: Other government agencies and GO PSA. 3s as may be assigned by the Provided, that nothing in this IRR shall prohibit the PSA from establishing satelite offices to serve as Registration Centers in privately owned locations, which the: PSA may find it suitable and advantageous tothe operations of PhilSys, The list of offices of the above-mentioned agencies, which will be designated as registration centers, shall be posted inthe PSA website. ‘The above agencies shall each allot an area fer the setting up of registration centers by the PSA. The PSA shall provide the necessary facilities, manpower, equipment, registration system, and resources to cary out the registration in the registration centers, {nthe case of the Flipino citizens residing abroac, the registration shall be made in the nearest Philippine Embassy or Philippine Foreign Service post, or other registration centers that may be designated by the Department of Foreign Affairs in coordination with the PSA, ‘The PSA and the agencies or private entites shall enter into separate Memoranda of Agreement delineating their dutes and responsibilities for the Setting up and operation of the registration centers. Registration shall be under the direct supervision and contral of the PSA, age 7 of 20The demographic and biometric information of Filipino cttizens and resident aliens shall be collected upon registration. However, for children below five (5) ‘years old, only the demographic information and froni-acing photograph shall be Collected, and their PSN shall be linked to that of their parent or guardian. For children aged five (5) 1014 years, including those who have been registered at ‘age four (4) or below, their complete biometic information shall be intially ‘captured at five (5) years of age and shall be recaptured once they reach 15, years of age. Persons incapacitated to give consent under Article 1327 of the New Civil Code (minors, insane or demented persons and deat-mutes who do not know how to \wnte) shail be accompanied by their parentis or lagal guardianis who must be of legal age during registration. In default or absence of any parent of legal age, the person exercising substitute parental authority as provided in Article 218 of the Family Code shall accompany the minor during registration B. Special Avrangements The PSA shall issue guidelines on the special arangements, for the registration ofthe following: senior citizens; persons with disability, indigenous persons; Persons in institutional households; persons in remote areas; foundiings; ‘solo parents; and ‘other persons whose special cicumstanoes may also be considered for ‘special arrangements, as may be determined by PSA, ‘The PSA shall coordinate with the appropriate agencies for the registration of those needing special arrangements, tne PSA shall also conduct mobil registration eetivties to cater to citizens and resident aliens as it may determine. C. Documentary Requirements 1. Application Form. The applicant shall submit a duly accomplished pplication form to any designated registration center. ‘The application form shall be supported by the presentation of an original ‘copy of any ofthe following primary documents ‘a, PSA-issued bith certficate and one (1) government issued identification ‘document with full name, photo and signature or thumbmark; or ». Philippine ePasspor issued by the Department of Foreign Affairs; or ‘©. Unified Mult-purpose Identification (UMIO) Card issued by Government Service Insurance System or Social Securty System age 8 of 20 Co4. other equivalent identification documents as may be determined in the guidelines issued by the PSA, In case a married woman presents an identification document which reflects her maiden name, she shall be required to present her PSALissued ‘marriage certificate should she opt to adoptthe surname of her husband. 2. In the event thatthe applicant is unable to provide the documents under the immediately preceding tem, any of the following documents shall be presented a. PSAissued birth certificate; of », any government-issued identification document reflecting atleast the fll name, front-facing photograph, and signature or thumbmark: or 6. identification documents issued by the private sector which comply with the requirements set by the PSA, 3. In the case of resident aliens, they must present their Alien Cerificate of Registration (ACR) or ACR ID and submit a sworn certification of the applicant stating that the aggregated days af stayin the philippines is more than one hundred eighty (180) days reckoned one (1) year prior to the pplication, and other supporting documents as may be required by PSA 4, Notwithstanding the foregoing, appropriale guidelines and mechanisms: shall be issued to ensure that the registration is not prohibite and restrictive as to unduly defeat the purpose of the Act. ‘An applicant who does not possess any of the documents in above items 2 {and 3 shall be endorsed by a qualified Inltoducer in accordance with the guidelines. set by the PSA, taking into consideration the specttic reumstances. As a minimum requiremen;, a qualified Introducer shall be of legal age and a PSN holder. The PSA shall maintain a record of all ‘qualfied introducers, each of whom shall be linked to all the registered Persons that they have endorsed. Persens who have been registered ‘through a qualified Introducer shall be tagged as such in the PhiSys. D. Registration Process ‘The applicant shall undergo a registration process where hismer demographic Information and biometric data shall be captured in the PhilSys, The applicant shall also be requiced to present any supporting documents as stated in Section 8.C ofthis IRR, ‘The PSA shall ensure that enties provided in the PhlSys Registration Form are consistent wth the documentary requierrents presented, In the event of discrepancies other than address, the data reflected on the presented documentary requirements shall prevail It there are no discrepancies, the bioratiic information (front-facing Photograph, fingerprints, and iris Scan) shall be captured exeept for applicants Page 920below five (5) years of age, in which case, ther demographic information and front-facing photograph shall be sufficient. Ifthe biometric and demographic information ofthe applicant are found to be Unique, a PSN will be generated for the applicant, Otherwise, further veriication shall be conducted by the PSA. In the event that the applicant ‘cannot be issued a PSN, he or she wil be natfied accordingly Registration in the PhilSys is deemed successful and complete upon ‘confirmation of registration by the PSA and the issuance of the PSN. Once ‘successfully registered, the person shall be issued a PhillD in a manner to be prescribed by the PSA, ‘SECTION 8. Deactivation of PSN A The PSN shall be deactivated on the folowing grounds: 4. 1088 of Fiipino citizenship; 2. loss of resident alien status; 3. failure to submit to intial biometric capture at age five (6) for persons who Were registered at age four (4) and below, 4. failure to submit to biometric capturing ‘at age 15 for persons who were registered at age 14 and below; 5. death ofthe registered person; and 6. upon the request ofthe registered person. 8. After due process the PSA may deactivate the PSN on the flowing grounds presentation of false or fcitious supporting documents during registration or {uring application for change of entries 2. misrepresentation in any form during and after registration in the PhilSys; and 3. fraudulent application ofthe biometric exception, ‘The Phild of a person with a deactivated PSN shall be surrendered to the PSA, ‘A deactwated PSN cannot be assigned to another person, Moreover, a person with a deactivated PSN shall not be given a new PSN. SECTION 10. Reactivation of PSN The PSA may reactivate the PSN of the registered person upon submission of satisfactory proof forts reactivation under the guideines to be set by PSA. Reactivation ofthe PSN shall entille the registered person to relssuance of Phil SECTION 11. Change of Entries Incase of change in or correction of any of the registered demographic data under the PhilSys, the registered person shall update their registration information in the manner as specified below war age 10.20,‘Any change or correction of entries in the name, sex date of bith, place of birth, oF ‘marital status shall be effected through the fing of ‘he Philsys Updating Form and the submission of the annotated PSA-issued Birth Certificate or Marriage Certificate, as the case may be, ‘Any person requesting change or correction in his er her name, sex, date of bith, place of bith, or marital status shall be required to submit to biometric ‘authentication, Change of entry in citizenship shall be effected though the fling of the Philsys Updating Form and the submission ofthe appropriate supporting documents, subject to biometric authentication, ‘An authenticated registered person may request for change in the address, mobile hhumber, or email address through the filng of the Philsys Updating Form at registration centers or at a web-based portal that may be provided by the PSA. ‘Authentication shall be carried out through the use of one-time password and biometrics such as facial image scanning, In the case of minors and persons incapacitated to give consent, any change in their registered data shall be made with the assistance oftheir PhlSys-registered parent (or guardian in the registration centers. In the absence of the PhiSys-registered Parent or guardian, the minor or person incapacitated to give consent shall be assisted by the person exercising substitute parental authority as provided in Article 216 ofthe Family Code, who must be registered inthe PhilSys. The correction of typographical errorfs, updating or recapturing of ‘biometic information in the PhilSys shall be done upon proper authentication under Section 12 ‘and validation in aecordance with the procedure of PhiSys Registration ‘SECTION 12, Authentication For purposes of establishing proof of identity for transacting business with any {government agency and private entilies, the presentation of the Phill PSN or FSN Gervative shall constitute sufficient proof thereof, "subject to proper authentication. Provided, that when authentication caxnot be performed without any fauit on the part ofthe cardholder or holier of a PSN or a PSN derivative, the PSA shall ensure that he or she wil not be disadvantaged or prejudiced thereby, |n case of online authentication, the PSA shall perform authentication of the PSN of {an individual submitted by any relying party, in relation to his or her biometic information or demographic information. The relying party shall conform with the Standards and guidelines set by the PSA, in consultation with DICT to ensure the secutty, efficiency, and integrity of the authentication process. There will be two mades of authentication: online and affine authentication For online authentication, the following information will be used to validate the identity ofthe registered person: age 1 of 208. PSN ora PSN derivative plus biometric information b. PSN ora PSN derivative plus demogrephic information ©. PSNora PSN derivative plus biometric and demographic information ‘The relying party shall choose the suitable mode(s) of authentication, which may involve the use of multiple factors such as but not limited to, demographic information, biometric information, one-time password (OTP), and PhilD, for a particular service or transaction as per its requirement, PSA shall provide guidelines fon authentication assurance levels based on international standards and best practices. ‘The PSA may also accredit a trusted service provider to function as an intermediary between registered relying parties and the PSA, to essistin the online authentication processes and e-KYC transactions of the PhilSys Registry Office (PRO). In exceptional cases to be determined by PSA, where the PSN or a PSN derivative cannot be provided, the biometric and demographio information may be used to authenticate the registered person's identity. For offline authentication, the presentation ofthe PhlID and the matching ofthe data Stored in the QR code will be used to validate the identity ofthe registered person for transactions and services as mentioned under the PhilSys Act The PhilSys_may retuin a YesiNo response cr demographic data including Pholograph, depending on the use case ‘Any relying party shall perform an e-KYC of the requesting person and shall obtain the consent ofthe registered person before collecting his or her identity information {or the purposes of authentication. It shal inform the registered person submitting his ‘or her identity information the following details namely: (a) the nature of the information that may be shared upon authentication; and (b) the uses to which the information received during authentication may be put by the relying party. Provided, ‘that the information requested shall only be used for the purpose for which it was requested, Where the identity of the registered person is autrenticated and established, the entity may request for PhlSys to provide the formers personal data for a legitimate, expressed, and specific purpose. Provided, thatthe registered person was informed of the specific personal information that shall be disclosed and the use of such ‘personal information shall be limited to the specifi aurpose prior to such disclosure thereof. Provided further, thatthe individual shall have given his or her prior consent to such disclosure of personal information, Provided finaly, that said disclosure of personal data is covered by a data sharing agreement between the requesting party and the PSA, age 120120 CoSECTION 13, Uses of PhillD and PSN. ‘The PhillD and PSN or a PSN derivative shall be honored and accepted, subject to authentication, in all ransactions requiting proof or verification of citzens or resident aliens’ identity, such as, but not limited t (2) application for eligibility and access to social welfare and benefits granted by the government, (©) application for services and benefits offered by GSIS, SSS, PhilHeatth HDMF, and other government agencies; (6) application for passports or travel documents; (¢) application for arver’s license; (6) tax-related transactions: (0) registration and voting identification purposes; {g) admission to any government hospital, heath center, or similar institution {hall other government transactions, (@) application for admission in schools, colleges, learning institutions and universities, whether public or private application and transaction for employment purposes; () application for opening of bank accounts and other transactions with banks {and other financial institutions; (0) application for clearances with the appropriate government agencies; and (am) other transactions requiing proot of identity. SECTION 14. Limitations Proof of identity shall not necessary be construed as proof of eligibility to aval of Certain benefits and services which shall be deterrined based on applicable rules {and regulations of the government authoriiesfagencies concerned. Issuance of the PSN andior PhillD shall not likewise be construed as incontrovertible proof of citizenship, RULE I PSA MANDATES ‘SECTION 15. PSA Mandates, ‘The PSA is the primary implementing agency to cary aut the provisions ofthe PhlSys ‘Act. Overall planning, management, and adminstraton of the PhiSSys. shall be the ‘esponsibility ofthe PSA. it shalt issue rues inthe implementation and enhancement of the PhilSys, including but not limited to registration, authentication, and. dala ‘governance. It shall ensure the integrity and securty of the same in accordance wih the PhiiSys Act, including all other applicable laws anc policies. The PSA shal issue ‘uideines and undertake measures. to ensure secure, reliable, and efficent authentication of PhlSys record upon the request of authorized government and private Cenites. The PhiSys as mentioned in Rule I of ths IRR shall be owned, managed. Maintained, ond administered by the PSA, with the technical assistance of the Department of Information and Communication Techrolagy. The PSA can adopt new land mare effective technology in furtherance of the PhiSyé Act. Pursuant thereto, the Slate shall provide for the instalation of state-of-te-art biometric machines in all Felevant agencies for authentication of data and ident holder. age 13 020,{The PSA shall colaborate with LGUs, other goverment agencies, and GOCCS in order { ensure the registration and enrolment of all izens and resident aliens in the PhlSye including the Indigenous Cultural Communites/indigenous Peoples (ICCsiIPs) and thone located in emate localities, PSA may also request assistance and securty from arproprate agencies during mobile ‘egistration of cltzens and resent ales as determines by the PSA. ‘There shall be established within the PSA and directly under the Ofice of the National Statistician, a separate office to be headed by a Deputy National Statistican (ONS), which shal perform the functions provided for under the Act. Services under the Office of the DNS and divisions under such services may be created {88 may be authorized by the Department of Budget and Management, Heads ofthe Services must be an Assistant National Statistician (ANS). Division heads requiring the rank of director or above shall be appointed by the Present. ‘The DNS and ANSs shal possess the following minimum qualifications (a) Master's Degree appropriate tothe poston; and (©) Relevant experience in management ‘The ONS and ANS shall be appointed by the President ofthe Philippines upon the fecommendation of the National Statistician. The ONS and ANS shall have a rank equivalent to and enjoy the Benefits and privilege as an Assistant Secretary and Director IV in other national government agencies, respectively, ‘The PSA hereby designates PSA Regional Directors to be the supervising officers {nd focal persons of their respective regions. A division shall be created within the Regional Statistical Service Office (RSSO) of the PSA to monitor and supervise the ‘registration of applicants and issuance of PSN and Phil. RULE PHILSYS POLICY AND COORDINATION COUNCIL (pspce) ‘SECTION 16, Croation of the PSPCC ‘The PhilSys Policy and Coordination Council (PSPC) is organized to formulate policies and guidelines to ensure effective coordinaton and implementation of the PhilSys SECTION 17. Composition ‘The PSPCC shall be composed ofthe fallowing: Secretary, National Economic and Development Authority (NEDA) as Chairperson; ». National Statistician and Civil Registrar Genera, Philippine Statistics Authority (PSA) as Co-Chairperson; age 18.0120© Undersecretary, Department of Budget and Management (DBM) as Vice Chairperson; 4. Undersecretary, Department of Foreign Affairs (OFA) as member; ©. Undersecretary, Department of Information ard Communications Technology (DICT) as member, 1. Undersecretary, Department of Finance (DOF) as member, 9. Undersecretary, Department of Social Welfare and Development (OSWD) as member, h, Undersecretary, Department ofthe Interior and Local Government (DILG) as member, \. Chairperson, National Privacy Commission (NPC) as member: |, Deputy Governor, Bangko Sentral ng Plipinas BSP) as member, k. President and General Manager, Government Service Insurance System (GSI8) as member |. President and Chief Executive Officer, Philippine Health Insurance Corporation (PhilHeatth) as member mm. President and Chief Executive Officer, Social Security System (SSS) as ‘member; and ‘8. Postmaster General, Philippine Postal Corporation (PHLPost) as member. SECTION 18. Powers and Functions |n adeition to their primary function as defined in Section 16 hereof, the PSPCC shall Perform the following powers and functions, including aut not limited to (6) ensure the compatiilty of the respective techrology infrastructure of diferent {government agencies in order to comply with the requirements ofthe PhilSys, (©) facitate inter-agency cooperation and collaboration in the implementation of the PhilSys; (©) consult _and enlist the assistance and sugport of relevant government agencies, the academe, as well as private insttutions or persons, as may be necessary in the formulation, review, or amendment of ‘policies. “and guidelines: (6) Issue guidelines to comply with itemational standards set for identity security ‘and data protection; and (©) recommend to Congress any measures, amendments, or modifications to the PhilSys Act and other related laws, as may be necessary. SECTION 19, Meetings Meetings shall be held regulary on a date, time, and place determined by the PSPC. The Chairperson or the Co-Chairperson may call a special meeting as the ‘eed arises. The PSPC shall formulate internal rules forts meetings. SECTION 20. Secrotariat The PSA shall serve as the PSPCC’s Secretariat which shall assist and provide ‘administrative support to the PSPCC. It shall perform other functions as may be instructed by the PSPCC or the Head of the Secretariat. age 25 of 20RULE V PROTECTION AND SAFEGUARDS ‘SECTION 21. Protection Against Unlawful Disclosure of information/Records No person may disclose, collect, record, convey, disseminate, publish, or use any information of registered persons with the PhilSys, give access thereto or give copies thereof to third parties or entities, including law enforcement agencies, national security agencies, or units of the Armed Forces of the Philippines (AFP), except in either ofthe folowing circumstances: ) When the registered person has given prior consent, specific only to the disclosed particular purpose; and ) When the competing interest of public heath or safety so requires, and provided that the risk of significant harm to the public Is established, the ‘elevant information may be disclosed upon order of a competent court, The (owner ofthe information shall be notified by PSA within 72 hours of the fact of Such disclosure tothe requesting party Information disclosed shall not be used except for tre specific purpose for which it was authorized and shall not be divulged by any person to any thied party other tran the person so authorized, PSA must ensure that information in the PhilSys is used only in accordance with its intended purpose as set forth in the PhiSys Act. Ary information obtained as a resutt of unlawful disclosure under the PhilSys Act Shall be inadmissible in any judicial, quasjuicial, or administrative proceedings, Registered persons may request the PSA to provide access to their own registered information and record history subject tothe guidelines and regulations to be issued by the PSA, ‘The records of the details of authentication requests processed hy the PSA shall be destroyed atter a period of one (1) year from the date of authentication, unless the registered person Selects a shorter period, SECTION 22. Privacy, Security, and Safeguards on the Philippine Identification ‘System (PhilSys) ‘The PSA, with the technical assistance of the DICT, shal implement reasonable and ‘appropriate organizational, technical, and physical Security measures to ensure that {he integrity of the PhiSys as well as the informaton gathered for the PhilSys, including information stored in the PhilSys Registy, i protected from unauthorized access, use, disclosure, and against accidental oF infentional loss, destruction, of damage and used only for its specified purpose. The PSA may also seek the assistance of other relevant agencies forthe same purpose. Page 16 f 20‘The PSA shall designate a separate Data Protection Officer for the PhilSys. The PSA shall ensure that applicants are adequately informed upon registration in the PhiSsys fon how their data wil be used and how they can access their registered information {and record history. All applicable rights ofthe registered person shall be upheld While uoholding the confidentiality provisions under Republic Act No, 10625, ‘otherwise known as the “Philippine Statistical Act of 2013, all data collated by the PSA under the PhilSys may be used to generate aggregate data or statistical Summaries without reference to or identification of any spectc individual. Provided, that nothing in the Act shall be construed 9s prohibiting or limiting the sharing of transfer of any personal data thats already authorized or requited by law, RULE VI PENALTIES ‘SECTION 23. Penal Provision 23.1. Any person or entity who, without just and sufcient cause, shall refuse to accept, acknowledge andior recognize the PhillD or PSN, subject to authentication, as the only official identiicetion of the holderipossessor thereof shall be fined in the amount of Five hundred thousand pesos (500,000.09) 232. Any person who utiizes the PhillD or PSN in an unlawful manner or use the same to commit any fraudulent act or for other unlawful purposels. shall be ‘punished with imprisonment of not legs than six (6) months but not more than {wo (2) years or a fine not less than Fifty thousend pesos (P50, 000.00) but not ‘more than Five hundred thousand pesos (P500,000.00), or both, atthe discretion ofthe court 23.3, The penalty of three (3) years to six (6) years imprisonment and a fine of One: milion pesos (P,000,000.00) to Three milion pesos (P3,000,000 00) shal be Imposed upon any offender found guity of any of the following acts or omissions: 2. The wilful submission of or causing to be submitted a fictitious name or {alse information in the application, renewal. or updating in the PhiSys by ‘any person, including the Introducer '. The unauthorized issuance of a PSN or printing, preparation, of issuance ‘of a PillO by any person, © Wilifal falsification, mutation, alteration, or tampering ofthe PhilD by any person; 4. The use of the PhillD/PSN or unauthorized possession of PhillD, without ‘any reasonable excuse by any person other than the one to whom it was issued or the possession ofa fake, falsified, or altered Phill; or age 17 of 20234, 235. 238. 237, 238. 239, The wilful transfer ofthe Phill or the PSN to any other person, ‘The penalty of sic (6) years to 10 years imprisonment and a fine of Three millon pesos (P3,000,000.00) to Five millon pesos (P5,000,000.00) shall be imposed upon any offender found guity of any of the following acts or 4a) Any person who shall collect or use personel data in violation of Section 112 ofthe PhilSys Act and the pertinent provisions ofthis IRR; b) Any person who shall wilfuly use or disclose data or information in Violation of Section 17 of the PhilSys Act ard the pertinent provisions of this IRR; or ©) Any person, not covered by the succeeding raragraphs, who shall access. the PhilSys'or process data, or information contained therein without any authority, 1 financial profit resulted from accessing, discosing, or using the data or information the guilty person shal, in addition, pay twice the amount gained from such act, Malicious disclosure of data or information by officials, employees, or agents Who have the custody or responsibilty of maintaining the PhilSys shall be penalized with 10 years to 18 years imprisonmant and a fine of Five million ‘besos (P5,000,000.00) to Ten millon pesos (P10,000,000.00). If financial profit resulted from such disclosure or processing of the data or information, the guilty person shall, in addition, pay twice the amount gained from such act. Officials, employees, or agents who have custody or responsibilty of ‘managing or maintaining the PhilSys shal be penalized with three (3) years to sx (6) years imprisonment and a fine of One milion pesos (P1,000,000.00) to Three milion pesos (P3,000,000.00) i by their onn negligence, the PhiSys is accessed by unauthorized persons, or the data or information contained therein is processed without any authority from the Phisys Act and the Pertinent provisions of this IRR or any existing law. In all instances, if the violation was committed by a government official or temployee, the penalty shall include perpetual absolute disqualficaton from hholding any public office or employment in the government, including any GOCCs, and their subsidiaries ‘The penalties imposed inthis Section shal be in adklition to those imposed on acts or omissions punishable by existing penal and other laws. Page 180120RULE Vil FINAL PROVISIONS SECTION 24, Transitory Provisions ‘The PSA shall carry out the implementation of the PhiSys in such manner that the operations of card-issuing government agencies shall not be impeded 0 as not to Unduly delay delivery of public service. Provided, that the PSA shall create transition plan to gradually synchronize and consolidate all existing government- initiated identiication systems by seeding the PSN or its derivative into the databases of all agencies into one integrated and interconnected identification system in order to provide the official and sufcient proof of identity ofthe registered person, The transition plan shall st up the timelines end deliverables and shal be Crafted in coordination with the concerned agencies and DICT, based on the guidelines issued by the PSPCC subject to the provisions of the Data Privacy Act of 2012 and other applicable laws and regulations SECTION 25. Information Campaign The PSA, together with the DFA and other govemment agencies concerned, shall conceptualize and undertake an extensive informaton campaign based on a ‘Comprehensive communication plan to all ctizens and resident aliens SECTION 26. Funding ‘The amount necessary to implement the provisions of the PhilSys Act shall be included in the General Appropriations Act. ‘SECTION 27. Separability Clause Wf any provision, section, of part of the PhilSys Act and this IRR, shall be dectared unconstitutional or invalid, such judgment shall nat affect, invalidate, or impair any other provisions, sections, or parts ofthe PhilSys Act and this IRR. SECTION 28. Amendment In the implementation of this IRR, the PSA, in coordination with the PSPCC, may introduce amendments thereto every five (5) years or earlier as the need arises. SECTION 28. Repealing Clause Al relevant administrative issuances or parts therecf, which are contrary to, oF inconsistent with any provisions of this IRR are repealed, amended, or modified accordingly Page 19020 arSECTION 30. Effectivity Clause ‘This IRR shal take effect immediately after its publicaticn in the Official Gazette or in @ newspaper of general circulation and upon fling with the University of the Philippines Law Center of three (3) certified copies thereot. Approved and signed this 20 ay ‘of February 2021 in Quezon City, Phipeines LO CLAIRE DENNIS S. MAPA National Statistician and Civil Registrar General Philippine Statistics Authority In consultation wth PhiSys Policy and Coordination Council (PSPC) member agencies and other agencies Secretary, National Economie and Development Authority (NEDA) Undersecretary, Department of Budget and Management (DBM) Undersecretary, Department of Foreign Affairs (O=A) Undersecretary, Department of Information and Communications Technology (ocr) Undersecretary, Department of Finance (DF) Undersecretary, Department of Social Welfare and Development (DSWD) Undersecretary Department ofthe Interior and Local Goveenment (DILG) Chairperson, National Privacy Commission (NPC) Deputy Governor, Bangko Sentral ng Piipinas (BSP) President and General Manager, Government Sevice Insurance System (esis) President and Chief Executive Officer, Philippine Heaith Insurance Corporation (PhiHeath) President and Chief Executive Officer, Social Security System (SSS) Postmaster General, Phppine Postal Corporaticn (PHLPost) Office of the Solicitor General aoe age 20.0120,