Philippines: Adopted Policy Guidelines on Data Localization of Data Stored in the Cloud

On 12 June 2020, the Philippines Department of Information and Communications Technology (DICT) announced the amendment of the Draft Executive Order – Policy Guidelines on Data Localization of Data Stored in the Cloud. In response to the COVID-19 pandemic, the DICT has updated its Cloud First Policy, acknowledging the significance of Information and Communications Technology (ICT). The revised policy offers guidance on its scope, data categorisation, security measures, sovereignty, residency, and ownership. The amendments delineate the institutions covered by the policy and those encouraged to follow it. Furthermore, they provide clarification on data sovereignty, underscoring the supremacy of Philippine laws over foreign regulations concerning data owned or processed by the government or affiliated entities. In addition, the policy encompasses provisions for enhancing ICT capabilities and updates on data classification, with the aim of improving the effectiveness of government agencies in serving the public and advancing digital transformation.