CyberCode.ph · Philippines

Executive Order 126 and COMPASS: Who’s Involved, Benefits and Safeguards

Last updated October 2, 2026 · Practical privacy, cybersecurity and technology-law guidance

Executive Order No. 126, series of 2026, institutionalizes DBM COMPASS as the Philippines’ unified public platform for government budget, spending, procurement and project-performance information. Signed by President Ferdinand R. Marcos Jr. on September 28, 2026, it assigns agency disclosure responsibilities and creates a council to oversee the system. Its intended public benefit is a clearer trail from allocated money to delivered projects. That benefit depends on accurate records, timely updates, independent checking and action on discrepancies. Source: Philippine Information Agency (PIA)

By Cybercode.ph Editorial Team · Materially reviewed October 1, 2026. Event: EO signed September 28, 2026; official explanatory reports published September 30, 2026.

In Filipino: Layunin ng COMPASS na mas madaling makita kung magkano ang inilaan, paano ginastos, at ano ang naging resulta. Kailangan pa ring suriin kung tama ang datos at kung talagang naihatid ang proyekto.

Jump to: What it is · Who is involved · How it works · Public benefits · Safeguards · Expected outcomes · Citizen checklist · What to do next · FAQ

EO 126 and COMPASS at a glance

CyberCode infographic summarizing COMPASS leadership, public benefits, privacy safeguards, redaction logs and agency accountability.
Conceptual infographic based on DBM’s September 30, 2026 explanation. The illustration is not a screenshot of the live portal. Disclosure duties remain subject to lawful exceptions.

What is Executive Order 126 about?

EO 126 makes COMPASS an institutional government transparency mechanism rather than simply a stand-alone budget website. COMPASS means Centralized Open Monitoring Platform for Appropriations and Spending Statistics. DBM launched the portal on June 26, 2026; the new order expands its policy footing and envisaged coverage. Source: PIA

According to DBM, the framework connects information across the national budget cycle: appropriations, fund releases, procurement, implementation and completion. It can cover financial and program performance, project status and other transparency information. Public-private partnerships and foreign-assisted programs may be covered insofar as they use, disburse or account for public funds through government mechanisms. This does not mean every private transaction becomes public. Source: DBM

The important practical question is whether a reader can trace the same project across those stages. A budget allocation is permission to spend; a release is a funding step; an obligation is a commitment; a disbursement is a payment. None, by itself, proves that a school, road or clinic was completed and is usable. These distinctions should guide how people read a public-spending dashboard.

Who are the main actors and parties involved?

The core decision-making body is the COMPASS Council, led by DBM and DICT, with DOF and DILG as members. The public and oversight institutions are users and stakeholders; they are not all automatic council members. Source: DBM

Agency roles and consultation scope: DBM; implementation responsibilities: PIA.

DBM’s September 30 release also identifies Acting Secretary Kim Robert C. De Leon as explaining the reform and discussing future sharing of COMPASS with the Office of the Ombudsman. This is an official implementation statement; it is not proof that every planned data-sharing function is already operating. The enduring responsibilities attach to the agencies and offices, rather than depending on one officeholder. Source: DBM

How will EO 126 be implemented?

Implementation requires council rules, agency data submission, compatible government systems and continuing compliance monitoring. The order’s framework and completed technical deployment are different things. Source: PIA

  1. Set disclosure standards. The council establishes policies, data standards, responsibilities and disclosure timelines.
  2. Collect and update agency information. Covered bodies provide the required records and remain accountable for their quality and timeliness.
  3. Connect existing systems. COMPASS must be capable of interfacing with financial, procurement, project-monitoring and digital-service systems.
  4. Apply lawful disclosure limits. Protected information is withheld or redacted with the required explanation and records retained for authorized oversight.
  5. Monitor compliance and improve the platform. The council monitors agency compliance and recommends emerging technologies to keep the platform secure and accessible. Non-compliance by public officers or employees may be grounds for administrative and disciplinary sanctions.

Source for implementation and accountability framework: DBM.

These systems are named by DBM. The practical purposes in the table are CyberCode’s explanation, not a claim that every integration has been independently tested or completed. For the wider legal framework, see our E-Governance Act guide.

When do the requirements and guidelines take effect?

PIA reports that the order takes effect 15 days after publication in the Official Gazette or a newspaper of general circulation, and that implementing guidelines are to be issued within 60 days from effectivity. We have not independently inspected the Gazette’s publication record to calculate a calendar deadline. Signing, legal effectivity, issuance of guidelines and completion of the expanded technical rollout should not be treated as the same date. Source: PIA’s September 30 report

How can COMPASS benefit ordinary Filipinos?

Its most direct potential benefit is making public spending easier to question using records. Better information can support accountability and better services, but those outcomes depend on how agencies, oversight bodies and the public use it.

These are illustrative benefits and uses, not measured results. EO 126 is a transparency reform, not a promise of automatic cash assistance, lower taxes or a guaranteed end to corruption.

What safeguards protect the system and the people?

The announced safeguards combine legal disclosure limits, documented exceptions, agency accountability and technical standards. A useful transparency system must protect both the integrity of public records and information that the law does not permit it to expose. Source: DBM

1. Privacy and national-security limits

Disclosures remain subject to laws protecting national defense, national security and personal information, including the Data Privacy Act. Public-spending transparency is not blanket permission to expose every person’s private details. Source: PIA See the CyberCode data-privacy hub for related rights and obligations.

2. Exception and redaction logs

DBM states that an agency lawfully withholding or redacting information must publish a log identifying the legal basis, approving authority and date. Complete records must still be maintained for authorized oversight and audit. This makes the reason for a gap more visible, rather than allowing a missing record to stand without explanation. Source: DBM

3. Responsibility for submitted data

The source agency remains responsible for accurate, complete and timely information. Failure to comply may be grounds for administrative or disciplinary sanctions under existing laws and rules. That is not a claim that every discrepancy automatically proves criminal liability or triggers an automatic penalty. Source: DBM

4. Integrity, auditability and resilience

DBM identifies standards covering authenticity, integrity, interoperability, accessibility, traceability, auditability, cybersecurity and operational resilience. Those are requirements and design objectives; this article does not certify that the platform has passed an independent security assessment. Source: DBM

5. Technology with clear limits

PIA reports that the order permits blockchain and other emerging technologies to help protect information integrity, security and reliability. Permission to use a technology does not establish that every record is on a blockchain or that a particular vendor or network has been selected. Source: PIA

CyberCode analysis: Tamper-resistant records can help expose later alterations, but they cannot establish that the original entry was truthful or that a reported project exists. Independent audits, inspections and investigation remain necessary. The related Baguio Katibayan story explains this distinction in another government-records setting.

What is the expected outcome—and how should success be judged?

The intended outcome is a connected, accessible and accountable public-spending information system. DBM describes a move away from fragmented disclosures toward an interoperable public financial-data framework. Improved public trust and better delivery are goals, rather than outcomes already demonstrated by the issuance of the order. Source: DBM

CyberCode recommends judging implementation by observable results:

  • Coverage: Are covered agencies and relevant programs represented, and are missing periods explained?
  • Timeliness: Does each record show when it was updated, with agencies meeting published disclosure timelines?
  • Traceability: Can the same project be followed from allocation through procurement, payment and completion?
  • Data quality: Do amounts, identifiers and dates reconcile with source records, and are corrections visible?
  • Public usability: Can ordinary people read the records on a phone and understand the terms?
  • Accountability: Are unexplained discrepancies answered, investigated where appropriate and corrected?
  • Protection: Are lawful redactions explained without exposing protected information?

These are editorial evaluation criteria, not numerical targets specified by EO 126. Important rollout questions include actual agency coverage, refresh schedules, correction procedures, public feedback routes, integration readiness and published security-assurance information.

How can a citizen check a project safely?

  1. Start at compass.dbm.gov.ph. Use the official domain and check the fields and instructions actually available.
  2. Identify the record precisely. Note the agency, fiscal year, project name or identifier, location, amount and last update. A national project located in a city is not automatically an LGU-funded project.
  3. Separate financial stages. Do not read an allocation, release, commitment or payment as proof of completion.
  4. Compare with source evidence. Review the linked or corresponding procurement records, agency completion reports and relevant audit material. Where safe and lawful, compare reported status with conditions on the ground.
  5. Keep the original record. Save a permitted download or full screenshot with its URL and access date. Preserve the original before annotating a copy.
  6. Ask for clarification first. Use an official contact or feedback route shown by the responsible agency. Describe the discrepancy and reference the record; avoid publishing unsupported accusations or personal details.

This is a recommended reading and evidence-preservation workflow. It is not a claim that COMPASS currently provides a dedicated complaint-submission feature. A dashboard discrepancy is a reason to check further, not a finding of corruption.

What EO 126 means for you and what to do next

For most Filipinos, EO 126 changes where to look first, not what rights they have. The right to information on matters of public concern already exists under Article III, Section 7 of the 1987 Constitution, “subject to such limitations as may be provided by law.” COMPASS is meant to make budget and project records easier to find in one place; it is not a complaint court and not a cash-benefit program. Source: 1987 Constitution, Art. III, Sec. 7 (DBM copy)

The table below sets out what the order means for each group and a sensible first action. Roles come from DBM and PIA; the suggested actions are CyberCode’s recommendations, not legal requirements.

Your options if a record looks wrong or incomplete

Start with the least adversarial route and escalate only when the facts support it. Each option below has a different purpose.

The Ombudsman’s constitutional mandate covers complaints “filed in any form or manner” against public officials and employees, including those of government-owned or controlled corporations (Art. XI, Sec. 12), and allows it to investigate “on complaint by any person” (Art. XI, Sec. 13). The Commission on Audit has the power to examine, audit and settle government accounts (Art. IX-D, Sec. 2). Source: 1987 Constitution (DBM copy). The eFOI portal describes a search-then-request process with status updates by email. Source: eFOI portal. NPC’s page lists filing by downloading the form, having it notarized and submitting it in person, by courier or by email. Source: NPC

Deadlines: no fixed deadline for raising a discrepancy with an agency or for an FOI request was verified for this article. The only periods verified are the order’s own: effectivity 15 days after publication and implementing guidelines within 60 days of effectivity (PIA).

First action: pick one national project in your area, find it on compass.dbm.gov.ph, and save the record with its URL and date. If something does not match, write to the responsible agency before drawing conclusions or posting about it.

Frequently asked questions

Are LGUs required to join COMPASS under EO 126?

The official reports distinguish covered national bodies, which are directed to disclose required information, from LGUs, which are encouraged to use the portal. DILG is directed to promote participation. Source: DBM

Does EO 126 replace audits or anti-corruption investigations?

The announced framework creates disclosure and oversight arrangements. A portal entry is not an audit finding, and access to records does not itself resolve an investigation or establish liability.

Does the order identify a private technology contractor?

The official explanatory material reviewed for this article does not identify a selected private vendor, underlying blockchain network or implementation contract. Do not infer that a supplier in another government project is automatically the supplier for COMPASS.

Will citizens receive money because of EO 126?

The reform concerns public access to financial and project information. It should not be advertised as a new cash-aid program.

Official sources and verification

Disclaimer

CyberCode.ph provides general educational information about Philippine technology law, privacy and public-spending transparency. This explainer is not a legal opinion, audit, certification of platform security or finding of wrongdoing. Consult the order, implementing guidelines and responsible agency records for a specific matter.

Sources rechecked as of: 2 October 2026

CyberCode updates

Get practical updates on Philippine technology law, data privacy, cybersecurity, and AI.

Email activity tracking

Unsubscribe any time. See our privacy policy below.