On July 13, 2026, President Ferdinand Marcos Jr. signed Executive Order No. 119, a significant update to the Philippines' data management framework. This move comes as government agencies increasingly rely on cloud computing and digital platforms for public service delivery.
The executive order introduces a comprehensive classification system for government data, categorizing it into Restricted Access Data and Open Access Data. This classification is based on the sensitivity of the information and its storage requirements.
New Data Classification Framework
Under EO 119, government data will be classified into various categories to determine the level of protection needed. Sensitive data is further divided into four classifications:
- Top Secret: Information that could severely damage national security if disclosed.
- Secret: Information that could harm national interests or assist a foreign entity.
- Confidential: Information whose unauthorized release could undermine government operations.
- Restricted: Sensitive information requiring protection but not classified at higher levels.
Open Access Data encompasses all other information that can generally be disclosed to the public, unless restricted by law.
Data Residency and Sovereignty
A notable feature of EO 119 is the introduction of a 'Data Residency Framework.' This framework determines where different types of government data can be stored, with stringent rules for the most sensitive information.
For example, Top Secret and Secret data must remain within Philippine territory, while Confidential data may be stored abroad with prior approval from the newly established Joint Oversight Committee for Data Classification (JOC-DC).
Less sensitive data can be stored on secure cloud platforms, provided they meet encryption and cybersecurity standards.
Monitoring and Implementation
The JOC-DC, co-chaired by the Department of Information and Communications Technology (DICT) and the National Security Council, will oversee compliance with the new regulations. The transition to the updated data management framework will take three years, prioritizing the classification of sensitive information.
These changes mark a significant evolution in the Philippine government's approach to data management. By addressing the complexities of storing sensitive data in the digital age, EO 119 aims to bolster cybersecurity, enhance governance, and facilitate transparency in government operations.