Republic Act No. 11055, the Philippine Identification System Act, created PhilSys as a foundational national identification system for Filipino citizens and resident aliens. The Philippine Statistics Authority administers the system and issues the PhilSys Number and PhilID, including authorized formats implemented under current rules.
Direct answer: RA 11055 enables reliable identity verification for public and private transactions, but it does not create a license to copy, retain, disclose, or repurpose PhilSys data without legal basis. Authentication must be proportionate, secure, and consistent with the Data Privacy Act.
Key concepts
Is the PhilSys Number permanent? Yes. Section 6 of RA 11055 makes the PSN a unique, randomly generated and permanent number. Government agencies use it as a standard identifier in their systems. The PSN, subject to authentication, may serve as proof of identity in public and private transactions; this does not authorize a business to demand, display or store the full number for every transaction. The PhilID Card Number (PCN) is a derivative used for transactions where the permanent PSN need not be exposed. See RA 11055, Section 6 and the PSA authentication advisory.
What information does PhilSys collect? Section 8 limits registry data to:
- Demographic data: full name, sex, date and place of birth, blood type, address, and Filipino citizen or resident alien status. Marital status, mobile number and email address are expressly optional.
- Biometric data: front-facing photograph, a full set of fingerprints and iris scan; other identifiable features only if necessary and determined under the implementing rules. PSA provides biometric exceptions where capture is impossible because of impairment.
Optional at PhilSys registration does not mean unprotected. Under the Data Privacy Act, Section 3(l), marital status, age and health information are sensitive personal information, as are government-issued identifiers peculiar to an individual. The PSN warrants especially strict handling. Biometric templates and images carry serious identity risk and require appropriate protection; do not assume a business is entitled to collect the registry’s biometrics merely because it checks a PhilID.
| Term | Meaning in practice |
|---|---|
| PhilSys Number | A permanent, randomly generated identification number assigned upon registration |
| PhilID | Official proof of identity issued under PhilSys in the form authorized by law and implementing rules |
| Demographic data | Identity attributes collected by the system, subject to statutory limits and implementing rules |
| Biometric information | Data used to establish uniqueness and authenticate identity, protected as sensitive information |
| Authentication | A process for verifying that claimed identity information corresponds to PhilSys records |
When the PhilID may be used
RA 11055 allows PhilSys proof of identity for government and private transactions where identity is needed, including benefits and services, financial and tax-related dealings, school and employment requirements, travel-document applications, and voter identification. A relying party should request only the information the transaction requires. Presenting a PhilID does not automatically justify creating a permanent copy or using PhilSys information for marketing, profiling, or unrelated analytics.
The law supports use of PhilSys proof for dealings with government agencies and private entities, including applications for benefits and services, financial transactions, tax-related dealings, school and employment requirements, travel-document applications, voter identification, and other transactions where proof of identity is needed.
A relying party should ask only for what the transaction requires. Visual inspection, offline verification, or electronic authentication may have different risk and data implications. The fact that a person presents an ID does not automatically justify creating a permanent copy or using the information for marketing, profiling, or unrelated analytics.
Acceptance and identity verification
PhilID authentication under RA 11055 may use visual inspection, offline verification, or electronic authentication, depending on the transaction and its data implications. PhilSys is designed to reduce repeated submission of multiple identifiers, while relying parties must verify identity without collecting more data than necessary. Refusal to recognize valid PhilSys proof without a lawful reason may have consequences under the Act and its rules, although proportionate anti-fraud and customer-due-diligence controls may apply when required by law.
- Visual and QR comparison: inspect the physical card’s security features, compare the printed data and photo with the presenter, and match the QR data. This is an offline method for a presented card.
- Signed QR verification: use PSA’s National ID Check to scan a supported card, paper or digital National ID and check the signed QR data. PSA guidance also describes integration of its public keys into a relying party application. Check the presenter against the verified photo and details; a successful QR result alone does not prove the person holding the ID is its owner.
- Live registry authentication: an authorized, onboarded relying party can use National ID eVerify for higher-assurance or remote workflows, including PSA-supported facial or fingerprint matching. This is the online route when a real-time registry check is needed and the service and lawful basis are available.
For routine in-person identification, begin with the least intrusive sufficient check. Use online registry authentication when the transaction risk or applicable sector rule calls for stronger identity assurance. Keep a fallback for service outages and for people who cannot provide a particular biometric; do not treat a failed scan alone as proof of fraud. PSA describes the current National ID Check and eVerify rollout.
Privacy, security, and disclosure
PhilSys records are protected by RA 11055 and the Data Privacy Act. Disclosure is restricted and generally requires the registered person’s consent or another specific lawful basis recognized by the statute, such as a court order in a qualifying case. Unauthorized access, use, or disclosure may create administrative, civil, and criminal exposure.
Organizations accepting PhilSys credentials should:
- document why collection or authentication is necessary;
- avoid collecting the PhilSys Number when a less intrusive identifier is sufficient;
- mask identifiers in displays and correspondence;
- encrypt stored copies and authentication records;
- restrict staff access and log sensitive actions;
- set a defensible retention and deletion schedule;
- train personnel to detect fake requests and social-engineering attempts; and
- maintain incident-response procedures for identity-data compromise.
If PhilSys information is exposed or misused
- Preserve messages, screenshots, access logs, transaction references, and notices.
- Notify the organization that collected or authenticated the credential.
- Secure affected accounts and change compromised credentials.
- Report suspected identity theft or account fraud to the appropriate service provider and law-enforcement unit.
- For improper personal-data processing, consider a complaint to the National Privacy Commission. See Cybercode’s NPC guide.
Frequently asked questions
Can a business keep a photocopy, scan or image of my PhilID?
Sometimes, but acceptance of the ID alone is not permission to keep a copy. The business must identify an applicable lawful basis and a specific, necessary purpose, give a suitable privacy notice, and test whether viewing or authenticating the ID and recording a minimal verification result would suffice. A separate law or sector rule may require customer records. If it keeps a paper or electronic image, it should limit access, secure storage and transfer, log relevant access, prevent unrelated reuse, set a documented retention period tied to the purpose or legal duty, then securely destroy the paper or delete the file and backups under its policy. There is no universal PhilID-copy retention period in RA 11055. These duties follow the Data Privacy Act’s transparency, legitimate purpose, proportionality and security rules and the NPC’s retention guidance. Avoid capturing the QR code or permanent PSN if the transaction can be completed with less data.
Does PhilSys replace every other government-issued ID?
It is a foundational proof of identity, but sector-specific credentials and licenses may still be required for particular rights or activities.
Can someone publish another person’s PhilSys details?
Unauthorized disclosure can violate RA 11055, the Data Privacy Act, and other laws. Context, intent, the information disclosed, and applicable exceptions matter.
Primary authority
- RA 11055, Sections 6, 8, 12, 13 and 19 — PSN, collected fields, acceptance and penalty.
- PSA Advisory on Authentication and Use of PhilID (4 October 2021) — offline methods and QR verification; read with the later PSA rollout of National ID Check and eVerify.
- RA 10173, the Data Privacy Act — classification, lawful processing, proportionality, security and retention.
Philippine law and PSA guidance checked 26 September 2026. The choice of verification method and copy retention also depends on applicable sector rules and the transaction.
This guide is general information, not legal advice. Consult current PSA and NPC issuances for operational requirements.