Supreme Court E-Library
Information At Your Fingertips

Pursuant to Executive Order No. 420, series of 2005, the National Economic and Development Authority (NEDA) hereby promulgates the following implementing rules and regulations on the streamlining and harmonization of identification (ID) systems of all government agencies and government-owned and controlled corporations.

RULE I
POLICIES AND OBJECTIVES

SECTION 1. Title - The rules contained herein shall be known and cited as the Implementing Rules and Regulations (Rules) of Executive Order No. 420, dated April 13, 2005.

SECTION 2. Declaration of Policy - It is the policy of the government to provide greater convenience for those transacting business with government and enhance the integrity and reliability of government-issued identification cards through the streamlining and harmonization of government identification systems.

SECTION 3. Objectives - The implementation of the Unified Multi-Purpose Identification System pursuant to E.O. 420 shall be guided by the following objectives:

a. To reduce costs and thereby lessen the financial burden on both the government and the public brought about by the use of multiple ID cards and maintenance of redundant databases containing the same or related information;
b. To ensure greater convenience for those transacting business with the government and those availing of government services;
c. To facilitate private businesses and promote the wider use of the unified ID card;
d. To enhance the integrity and reliability of government-issued ID cards; and
e. To facilitate access to and delivery of quality and effective government service.

RULE II
COVERAGE AND RESPONSIBILITY

SECTION 4. These implementing rules and regulations (Rules) shall cover all government agencies and government–owned and controlled corporations issuing or shall be issuing ID cards to their members or constituents. The Director-General of the National Economic and Development Authority (NEDA) shall be responsible for coordi- nating and facilitating the implementation of these Rules.

RULE III
MEANING OF TERMS AND ACRONYMS

SECTION 5. The following terms and acronyms as used in these Rules shall mean:

a. “AFIS” or Automated Fingerprint Identification System is a biometric identification methodology that uses digital technology to obtain, store, and analyze fingerprint data.

b. “Biometrics” refers to the technique of verifying a person’s identity based on the individual’s unique physiological characteristics and/or behavioral characteristics. The biometrics identifiers covered in these Rules are the fingerprints and the handwritten signature of an individual.

c. “BIR” refers to the Bureau of Internal Revenue.

d. “COMELEC” refers to the Commission on Elections.

e. “Common Reference Number” or “CRN” refers to the unique number assigned to an individual upon successful enrollment into the CRN Registry. The CRN will be the individual’s unique identifier during his or her lifetime.

f. “CRN Registry” refers to the collection of identification records of all individuals successfully enrolled and maintained by the Central Verification and Enrollment Agency, or CVEA, as defined in Section 5 t (4) hereof.

g. “Data” refers to the 15 data items enumerated in Section 3 of Executive Order No. 420. For purposes of these Rules, the following classifications of data shall be used:

(1) “Basic data” refers to the 5 data items from the list of 15 data items, which are directly associated with an individual since birth and can be verified against the individual’s birth certificate. These are: name, place of birth, date of birth, name of parents, and sex;

(2) “Biometrics Data” refers to the 3 data items from the list of 15 data items, which are based on the physiological and behavioral make-up of an individual and can be used in identifying and/or authenticating the identity of the individual. These are: photograph, signature, and two index fingerprints; and

(3) “Other Data” refers to the remaining 7 data items from the list of 15 data items. These 7 data items are: home address, marital status, height, weight, two thumb marks, any prominent distinguishing features, and Tax Identification Number (TIN). Although also considered biometrics data, the two thumb marks shall be classified as Other Data for purposes of these Rules.

h. “DFA” refers to the Department of Foreign Affairs

i. “Enrollee” refers to an individual who has his or her data stored in the CRN Registry.

j. “Enrollment” refers to the process of verifying the registration data (personal data and biometrics data) submitted about an individual and the subsequent storage of such data into the CRN Registry.

k. “Identification or ID Card” refers to the card issued pursuant to these Rules to an individual for purposes of establishing his or her identity. For purposes of these Rules, an ID card may refer to any of the following:

(1) “Agency ID Card” is the generic term to refer to all identification / license / voter’s cards issued by government agencies to their employees, members, professionals, voters, taxpayers.

(2) “Transition ID Card” refers to an agency ID card with the CRN of the card owner included in the card either as one of the human-readable data items printed in the card and/or encoded in one of the machine-verifiable areas of the card. As the term “Transition” implies, it is an ID card issued prior to the full implementation of the unified multi-purpose ID system and the corresponding issuance of the unified multi-purpose ID card as defined below.

(3) “Unified Multi-Purpose ID Card” refers to the single format “one- look” card which is the subject of Rule VI hereof. The card shall bear the CRN of the card owner and will retain the agency name and logo of the issuing agency with the same functionalities as those of the original agency card or the transition ID card.

l. “Government Agency” refers to any government department, bureau, authority, or institution which receives annual or special government budgetary appropriations for its operations.

m. “Government Owned or Controlled Corporation” or “GOCC” refers to a government entity or organization that is created or established by law called its charter. For purposes of these Rules, all government financial institutions (GFIs) fall under the general category of GOCCs, hence are covered by these Rules. Government corpora- tions registered or incorporated under the corporation law have the option to register as a participating agency as defined in Section 5t hereof.

n. “GSIS” refers to the Government Service Insurance System.

o. “LGU” refers to a local government unit.

p. “LTO” refers to the Land Transportation Office.

q. “NEDA” refers to the National Economic and Development Authority.

r. “NSO” refers to the National Statistics Office.

s. “Pag-IBIG Fund” refers to the Home Development Mutual Fund or HDMF.

t. “Participating agency” refers to any government agency or GOCC covered by E.O. 420. For all intents and purposes, all government agencies and GOCCs as defined herein are considered participating agencies. Other government institutions or instrumentalities, including LGUs, may, at their option, register and participate under these Rules. The procedures for registration, as well as the agency with which interested applicants may register, shall be announced by the NEDA.

Participating agencies are categorized into any or a combination of the following:

(1) “Registration Agency or Center” refers to a government agency, GOCC, or a designated registration center, which is responsible or has the facilities for the collection of personal data and/or the capture of biometrics data of its members and/or employees, as well as other individuals who voluntarily apply for a unified multi-purpose ID card;

(2) “Card Issuing Agency” refers to a government agency or GOCC, or any other registered participating agency that produces and/or issues ID cards to its employees and/or members. A card issuing agency may also be a registration agency or center.

(3) “Central Verification and Enrollment Agency”, or CVEA”, refers to the government agency or institution responsible for the verification of an individual’s registration data, including his or her biometrics data, and the subsequent enrollment of the individual’s data into the CRN Registry. The CVEA shall also be responsible for the maintenance and security of the CRN Registry. For purposes of these Rules, or until such time that another agency has been designated as such, the National Statistics Office (NSO) shall be the CVEA.

(4) “Biometrics Data Matching Center” or “BDMC” refers to an agency or GOCC which has an installed and/or operational automated fingerprint information system (AFIS) capable of “one-to-many” fingerprint data matching. For purposes of these Rules, and until such time that another agency has been designated as such, the SSS shall be the Biometrics Data Matching Center or BDMC.

u. “PhilHealth” refers to the Philippine Health Insurance Corporation.

v. “PhilPost” refers to the Philippine Postal Corporation.

w. “PIA” refers to the Philippine Information Agency.

x. “PRC” refers to the Professional Regulations Commission.

y. “Program member” refers to a person enrolled or registered with any of the participating agencies like the GSIS, SSS, Pag-IBIG, or PhilHealth.

z. “Registration” refers to the process of collecting personal data and biometric samples from a person in preparation for the verification and storage of the reference data and biometrics templates of the individual into the CRN database.

z1. “Rules” refers to these Implementing Rules and Regulations.

z2. “SSS” refers to the Social Security System.

RULE IV
THE UNIFIED MULTI-PURPOSE ID SYSTEM

SECTION 6. Establishment of the Unified Multi-Purpose ID System. The unified multi-purpose ID system as prescribed under E.O. No 420 is hereby established pursuant to these Rules for the purpose of streamlining, harmonizing, and unifying all ID systems in government. The system, which shall cover primarily all government employees and program members, may also include other individuals who may voluntarily register under this system. The unified multi-purpose ID card issued under this System shall include a CRN which shall serve as an individual’s unique identifier during his or her lifetime.

SECTION 7. Core components of the Unified Multi-Purpose ID System. The core components of the Unified Multi-Purpose ID System are: (a) the Common Refer- ence Number, or the CRN; (b) the database or the CRN Registry; and (c) the unified multi-purpose ID card. The CRN is the unique number assigned to an individual. The CRN Registry is the database containing records of individuals enrolled and assigned a CRN. The unified multi-purpose ID card is the secure medium that shall contain the CRN and which can be presented by the individual as proof of his or her identity.

SECTION 8. Non-denial of services. While possession of the unified multi-purpose ID card and/or ownership of a CRN can facilitate transactions with government, under no condition shall the absence of either the card or the CRN be a ground for denying any government service to an individual.

SECTION 9. The National Task Force, National Technical Working Group, and the Special Working Groups on Back-Office Operations and Communications. The National Task Force (NTF) created pursuant to NEDA Memorandum Order No. 01, Series of 2005, which now becomes part of these Rules, shall ensure the effective coordination and implementation of E.O. 420 and these Rules.

The NTF shall be supported and provided technical advice and assistance by the National Technical Working Group (N-TWG), which is also created pursuant to said NEDA memorandum order, and chaired by the National Statistics Office. The Special Working Group (SWG) for Back-End Operations, to be chaired by the Commissioner and Director-General of the National Computer Center, and the SWG for Communications, to be chaired by the Vice President for Public Relations of the Social Security System, and alternate member to the SSS President as NTF member, are created by virtue of these Rules.

Overall secretariat support shall be provided by the NEDA and the NSO, with assistance from the participating agencies. Other special working groups may be created by the NEDA Director-General as the need arises.

RULE V
THE COMMON REFERENCE NUMBER

SECTION 10. Generation and assignment of a CRN to registered and qualified government employees and program members. The Common Reference Number, or CRN, shall be the unique number generated and assigned by the CVEA to an individual upon successful enrollment into the CRN Registry. The CRN shall be the individual’s unique identifier during his or her lifetime.

SECTION 11. Non-reusability of the CRN. Once assigned, the CRN shall be permanent and shall remain with the individual during his or her lifetime. It shall not be reused or reassigned to another individual.

RULE VI
CHARACTERISTICS OF THE MULTI-PURPOSE ID CARD

SECTION 12. Physical characteristics of the unified multi-purpose ID card. The unified multi-purpose ID card shall have the following characteristics:

a. Dimensions. The unified multi-purpose ID card shall follow the dimensions prescribed by ISO 7810, which is approximately 86 mm X 54 mm.

b. Functional life and replacement. The card shall have a functional card life of at least 10 years. The card owner may request for, and after proper justification, like a change of address, will be issued a new or replacement ID card.

SECTION 13. Prescription on the card design. The NTF, on the recommendation of the N-TWG, shall prescribe the card design 60 days after these Rules become effective.

SECTION 14. Data in the unified multi-purpose ID card. The unified multi-purpose ID card shall carry the CRN, basic data of the card owner, and control information. Such basic data shall be limited to his or her name, sex, photograph, signature, date of birth, images of the two index fingers, and home address. Control information may include the card serial number, the name and official logo of the issuing agency, date of issuance of the card, expiration date of the card, and instructions for the return of the card in case it is lost.

SECTION 15. Non-Replacement of Licenses or ID cards. The following ID cards need not be replaced with the unified multi-purpose ID card:

a. Licenses and ID cards such as professional ID cards issued by the PRC and other regulatory bodies, and drivers’ licenses issued by the LTO; and

b. ID cards issued in conformity with international statutes or treaties where the Philippines is a signatory such as the Philippine passport issued by the DFA and the seafarer’s ID.

Holders of such licenses or ID cards shall still have to undergo enrollment under the system and if qualified and have not yet been issued a CRN, shall be issued one. Their CRN shall become part of their ID records and incorporated in their licenses or ID cards.

RULE VII
PROCEDURES FOR REGISTRATION
AND THE ISSUANCE OF THE CRN AND THE MULTI-PURPOSE ID CARD

SECTION 16. Registration. Collection of registration data from individuals may happen through either of the following tracks: (a) use of the individual’s existing data which are already stored with the Participating and/or Registration Agency, or (b) new registration.

a. Track 1 – Use of existing data. Under this track, individuals who have existing re- cords, including the Basic Data and Biometrics Data required for enrollment, shall be assigned a CRN, subject to the proper validation/verification of their biometrics data as prescribed under Section 17 hereof; Provided, that the individual has consented to the use of the record through an expressed or signed written waiver or consent.

b. Track 2 – New registration. Under this track, individuals who have no existing records, including their Basic Data and Biometrics Data, shall file the required registration/ enrollment form and have their biometrics data taken at a Registration Agency or Center. The registration record of the individual shall be submitted for validation/verification as prescribed in Section 17 hereof; Provided, that the individual executes a waiver or con- sent which shall form part of the enrollment form.

SECTION 17. Verification/Validation of data, enrollment, and generation/ assignment of a CRN. Prior to enrollment, the Biometrics Data of an individual applying for an ID card shall be verified and validated with the Biometrics Data Matching Center, or BDMC, while the Basic Data, which include the individual’s birth records, shall be verified/validated with the CVEA; Provided, that such validation/verification shall only be done with the written or expressed consent of the individual, through a statement of waiver, which shall form part of the enrollment form submitted and signed by him/her.

The successful validation/verification of the individual’s Basic Data and Biometrics Data shall cause the generation and assignment of the CRN and the inclusion of the individual’s registration data into the CRN Registry.

Unsuccessful enrollment shall be treated as exception cases to be handled in accordance with Rule X hereof.

SECTION 18. Card production and issuance. Results of the verification shall be forwarded to the Registration agency that submitted the data, or as agreed between the Registration Agency and the CVEA. The Registration Agency shall forward the results to the Card Issuing Agency that shall be responsible for the production of the unified multi-purpose ID cards, and subsequent issuance of the cards to the owners.

SECTION 19. Fees for ID cards. The charging or non-charging of fees for the provision of ID cards, whether new or replacement, shall be subject to the card-issuing agency’s policies pertinent to the issuance of ID cards.

RULE VIII
IMPLEMENTATION OF THE MULTI-PURPOSE ID SYSTEM

SECTION 20. Three phases of implementation. The implementation of the Unified Multi-Purpose ID System shall be done in three (3) phases, as follows: (a) Phase 1- Laying the groundwork for the Unified Multi-Purpose ID System; (b) Phase 2 - Start of the issuance of the Transition ID Cards; and (c) Phase 3 - Full implementation of the Unified Multi-Purpose ID System.

SECTION 21. Phase 1 - Laying the groundwork for the Unified Multi-purpose ID System. This shall be done within the first 60 days after these Rules become effec- tive. During this period, participating agencies proceed with the provision and adoption of the CRN into their agency ID systems, including their ID registration forms and ID card format and content. The CVEA shall set up the CRN Registry and define electronic linkages to the CRN Registry. The NTF, through the N-TWG and the SWG on Back-Of- fice Operations, shall also finalize the design of the Unified Multi-purpose ID Card and prescribe the specific procedures for the registration, verification/validation of the basic and biometrics data, and the generation and assignment of the CRN to each individual successfully enrolled in the CRN Registry.

SECTION 22. Phase 2 - Start of issuance of the Transition ID Cards and Unified Multi-Purpose ID Cards. This shall be from the 61st day up to within one year after these Rules become effective. Within Phase 2, participating agencies start issuing Transition ID Cards, or the Unified Multi-Purpose ID Cards in the case of new or replacement cards. Also within Phase 2, each participating agency shall start to adopt the CRN as the secondary or primary number in transactions within the agency; adopt the multi-purpose ID card as a valid ID card for establishing the identity of the card owner or bearer; and, with the consent of the owner, use the CRN for on-line verification of information presented in the Multi-purpose ID Card and on-line cross-checking or validation with the CRN Registry.

SECTION 23. Phase 3 - Full implementation of the Unified Multi-purpose ID System. This phase shall commence one year after these Rules become effective. In Phase 3, card issuing agencies shall only issue the Unified Multi-purpose ID Cards for new or re- placement cards. Also during this phase, the CRN shall already be the primary identifier of an individual transacting business with government or private business, or in availing of services from any government agency.

RULE IX
THE CRN REGISTRY

SECTION 24. Information stored in the CRN Registry. The contents of the CRN Registry shall be limited to the 15 data items listed in Section 3 of EO 420 for each individual enrolled in the CRN Registry; Provided, that the Registry shall also contain the CRN and such control fields as necessary to ensure the integrity of the record and to keep track of possible intrusions or changes/modifications in the record; Provided, further that the control fields also include the date the record was first created, as well as a record of the dates/times the data have been modified or updated, and the specific modifications or changes made in the record;

Under no circumstances shall the control fields include other data or cross references to any record or data of the individual in other agencies.

SECTION 25. Custodian of the CRN Registry. The NSO shall be the custodian of the CRN Registry. As such, it shall be responsible for protecting each and every record stored in the CRN Registry from unauthorized access, modification, destruction or disclosure, except in cases of force majeure. The NSO shall maintain on-site as well as off-site back-up copies of all records in the CRN Registry

SECTION 26. Infrastructure support. The NSO, as the CVEA, shall be responsible for the establishment, operation and management of the CRN Registry. This may include the setting up of a data center to ensure efficient operation and to provide ample physical security to the records and databases.

SECTION 27. Access and control mechanisms. The CVEA, in consultation with other participating agencies, shall define the necessary access and control mechanisms, including updating protocols and procedures, to ensure the security and integrity of all records stored in the CRN Registry.

SECTION 28. Retention of data in the CRN Registry. Information about an enrollee, including his/her CRN, shall be archived and removed from the active CRN Registry five years after sufficient evidence of his/her death is presented or, in cases where a person’s death is not reported, after a sufficient number of years equivalent to the maximum expected lifespan of an individual plus a margin of 30 years has elapsed.

RULE X
HANDLING OF EXCEPTION CASES

SECTION 29. Exception cases. The NTF shall prescribe the appropriate measures to address the non-assignment of CRN resulting from but not limited to the following:

a. absence of a birth certificate or presence of multiple birth documents;
b. discrepancies between registration and birth certificate data;
c. fingerprints already in the database;
d. multiple registration attempts;
e. inability to capture biometric samples like the required index finger sample or the signature or both; and
f. identity thefts.

SECTION 30. Security breaches and other cases. Likewise, the NTF shall also prescribe procedures for handling security breaches and tampered, lost, or malfunctioning cards as well as attempts to misrepresent or the willful use of the CRN or the Unified Multi-purpose ID Card for fraudulent or illegal purposes.

RULE XI
CONFIDENTIALITY/PRIVACY SAFEGUARDS

SECTION 31. Strict prohibition against disclosure. Personnel of participating agencies shall be strictly prohibited from unauthorized disclosure or sharing of any information or data of any person applying for or enrolled under the Unified Multi-Purpose ID System, unless required by law or by a Court order.

SECTION 32. Security and access to the CRN Registry. Authorization from the owner shall be required for access to and disclosure of any data or information about the individual stored in the CRN Registry. Access levels to limit the disclosure of information from the CRN Registry to participating agencies and security procedures to be enforced in the CRN Facility shall be defined by the NTF.

SECTION 33. Data inquiries from the CRN Registry. In general, without additional consent from the owner, verification of data from the CRN Registry coming from verifying agencies shall only be responded to in the affirmative or the negative with no specific data about the individual being given or disclosed. Only queries with the consent of the owner shall result in the release or disclosure of information from the CRN Registry.

SECTION 34. Other confidentiality/non-disclosure provisions. The NTF, on the recommendation of the N-TWG, may define additional standards and procedures to be implemented by participating agencies in order to ensure that the data submitted by the individual remain confidential and well secured.

RULE XII
INFORMATION, EDUCATION, AND COMMUNICATION PROGRAM

SECTION 35. A continuing information, education, and communication (IEC) program shall be formulated and implemented to inform and educate the public on the benefits of the Unified Multi-Purpose ID System, particularly in availing of government services. The IEC program shall cover all government agencies, GOCCs, and other government institutions and instrumentalities, including LGUs, to ensure wide support and cooperation in the implementation of the system. The IEC shall also be directed toward encouraging the private sector to adopt and recognize the unified multi-purpose ID card and/or the CRN.

The Special Working Group (SWG) for Communications created pursuant to Section 9 of these Rules shall oversee the implementation of the IEC program.

RULE XIII
FUNDING/APPROPRIATION

SECTION 36. Funding. Such funds as may be recommended by the DBM shall be provided to carry out the objectives of these Rules. However, to such extent that they are able to, participating agencies are enjoined to allocate and make available from their existing appropriations or funds such amounts as may be necessary to help defray the cost of implementing the Unified Multi-Purpose ID System, subject to their existing internal policies, and accounting rules and regulations.

RULE XIV
TRANSITORY PROVISIONS

SECTION 37. Phasing in the Multi-purpose ID Card. Card-issuing agencies have the option of issuing either the Transition ID card or the Unified Multi-Purpose ID card for new and replacement cards; provided that one (1) year after these Rules become effective, only Unified Multi-Purpose ID cards shall be issued.

SECTION 38. Validity of issued cards. Agency ID Cards and Transition ID Cards already issued shall continue to be valid and honored in transactions with government agencies until their expiry dates as prescribed by the card issuing agencies.

RULE XV
MISCELLANEOUS PROVISIONS

SECTION 39. Amendments of the Rules. Amendments of these Rules may be issued from time to time, or as may be required or necessary.

SECTION 40. Reporting requirements. The NTF shall monitor the status of and compliance with the implementation of these Rules and submit periodic reports to the President, through the Office of the Executive Secretary.

SECTION 41. Repealing clause. Any order, circular, memorandum, rule or regulation, or parts thereof, which are inconsistent with the provisions of these Rules are hereby repealed or amended accordingly.

SECTION 42. Separability clause. If any section in these Rules or application of such section to any circumstance is declared invalid or unconstitutional, the other sections not affected thereby shall continue to be valid and in effect.

RULE XVI
EFFECTIVITY

SECTION 43. These Rules shall take effect fifteen (15) calendar days from its publication in the Official Gazette or a newspaper of general circulation.

Adopted: 12 July 2005

(SGD.) ROMULO L. NERI
Secretary of Socio-Economic Planning
(Director-General)