Overview

The first law ever signed by Ferdinand “Bongbong” Marcos Jr. as a president was the Republic Act No. 11934, or the SIM Registration Act, which would require everyone to present valid identification documents when buying SIM cards.

Signed into law last Oct. 10, some of the law’s supporters see it as an answer to the text scams that are stealing personal data and money from victims. Its critics, meanwhile, say that while it’s important to address the scams, this law is just as equally dangerous, if not more dangerous. Progressive groups, for example, warned that everyone’s privacy rights may be compromised due to this because if the data fall into the wrong hands, it can be used for illegal surveillance.

The law’s implementing rules and regulations (IRR) was released two months after. Under the IRR, SIM card owners will have 180 days to register.

Here are the things you must know in order to comply with the law:

What Types of SIMs Should be Registered?

All SIM cards should be registered. And I mean ALL, whether it’s for your phone, for your wireless broadband, or an embedded (eSIM) inside your phone. All SIM cards that we will buy starting Dec. 27 will be in a deactivated state. They cannot be used unless they are registered by the buyer through the public telecommunications entity (PTE), the person or entity that sold them the SIM card.

SIM cards registered by foreign nationals will only be valid for a month, but can be extended once the foreign national presents documents showing his or her visa has been extended.

The PTEs are required to deactivate SIM cards once they are lost or stolen, or upon the request of user for any reason. (More on requests to change information below.) Remember though, that the PTE may still retain the user’s information for ten years from the date of deactivation.

When is the Registration?

For SIM cards active before Dec. 27, they must be registered before June 25, 2023, or they will be deactivated. The deactivated SIM cards can still be reactivated, though. Owners will have five days after the deadline has elapsed to register. We should prioritize phones connected to own bank accounts, school or work, or other digital and social media accounts so that we wouldn’t have problems with one-time passwords (OTPs). There IRR also mentions an option to move the June 25 deadline up to Oct. 23, 2023.  

Starting Feb. 27, the Department of Information and Communications Technology (DICT) and the National Telecommunications Commission (NTC) will facilitate registrations in remote areas. They will then be getting help from the Department of Interior and Local Government (DILG), the Department of Education (DepEd), and PTEs in the area.

What are the Requirements?

The registration is free and the forms will be accessible through websites or platforms created by the PTEs.

PTEs would have to register existing postpaid account owners to those websites or platforms. PTEs will register the SIM cards under the name of the owners, but the owners would have to confirm the information through the website or the platform. Registration can be made either for an individual, a juridical entity (e.g. corporations), or foreign nationals.

	Individuals	Minors	Juridical Entities	Tourists	POCs
Information needed	Individuals must give their ⌲ full name, ⌲ birthday, ⌲ sex, ⌲ current address, and the number of the ID they will present to the PTE.		Juridical entities will provide the ⌲ business name, ⌲ business address, and ⌲ full name of the authorized signatory.	Foreign nationals, meanwhile, will give their ⌲ full name, ⌲ nationality, ⌲ birthday, ⌲ passport information, ⌲ their local address, and ⌲ the number of an additional ID they must present.	The IRR also mentioned specifically that for the cases of persons of interests (POCs) such as refugees, asylums seekers, stateless persons, stateless applicants, and populations at risk of statelessness as defined by international conventions, they must indicate their ⌲ type of travel or admission document. This is in addition to their ⌲ full name, ⌲ nationality, ⌲ birthday, ⌲ passport information, ⌲ their local address, and ⌲ the number of an additional ID they must present.
IDs registrant can use	Individual users may present ⌲ a passport ⌲ Philippine Identification System ID or the Philippine Identification Card ⌲ Social Security Service (SSS) ID) ⌲ Government Service Insurance System (GSIS) e-Card ⌲ a driver’s license ⌲ a National Bureau of Investigation (NBI) clearance) ⌲ a police clearance, firearm’s license to own and possess ID ⌲ Professional Regulation Commission (PRC) ID ⌲ Integrated Bar of the Philippines ID ⌲ Overseas Workers Welfare Administration (OWWA) ID ⌲ Bureau of Internal Revenue (BIR) ID ⌲ a voter’s ID, a senior citizen’s ID ⌲ Unified Multi-purpose Identification (UMID) card ⌲ a PWD card ⌲ other valid government-issued ID with photo.	Minors’ SIM card registration will be under the name of the parent or guardian. They will also be required to bring any ID mentioned on the left and the consent of the minor’s parent or guardian to register the SIM.	Juridical entities should present their ⌲ certificate of registration. In the case of corporations, they should also provide their ⌲ duly adopted resolution designating the authorized representative. For other juridical entities, they need a ⌲ special power of attorney.	Tourists have to present their ⌲ passport ⌲ proof of address in the Philippines (hotel bookings, for example) and ⌲ their return ticket to their own country.	Other foreign nationals who have to present their ⌲ passport ⌲ proof of address (e.g. hotel bookings) ⌲ (if applicable) Alien Employment Permit from DOLE) ⌲ (if applicable) Alien Certification of Registration Identification Card from BI ⌲ (if applicable) school registration ⌲ (if applicable), type of travel or admission document from DOJ for POCs.

After Registration, What if I Want to Change Information Details?

Users must immediately report to the PTEs where they registered that they need to change information. The PTEs are required to make changes to your information within two hours of the receipt of the request.

After Registration, What if I Lost my SIM Card?

Users must immediately report to the PTEs where they registered to report that their SIM card was lost or was stolen. The PTE is required to deactivate the SIM card within 24 hours of the report.

What if My Information Gets Leaked?

The information provided to the PTEs should be treated as confidential, according to the IRR. Any breach of confidentiality will result to a fine of not less than P500,000 up to P4 million. PTEs are required to report to the DICT within 24 hours any attempt for personal data breach. The DICT, on the other hand, will be actively auditing these PTEs every year.

What are the Other Penalties Mentioned in the IRR?

Aside from the penalties that will be imposed on PTEs for data breach, the IRR also mentioned penalties for providing fake information, selling or transferring of a registered SIM card, spoofing* of a registered SIM, failing or refusing to register a SIM, selling of a stolen SIM, and breach of confidentiality due to negligence (this is different from the breach of data mentioned above). Below is a table showing the penalties for each offense.

OFFENSE	PENALTY
Providing fake information	⌲ Imprisonment not less than six months, but not more than two years, or ⌲ A fine not less than P100,000 but not more than P300,000, or ⌲ both.
Selling or transferring of registered SIM	⌲ Imprisonment not less than six months, but not more than six years, or ⌲ A fine not less than P100,000 but not more than P300,000, or ⌲ both.
*Spoofing of a registered SIM – Spoofing is the act of transmitting misleading or inaccurate information about the source of the phone call or text message with the intent to defraud, cause harm, or wrongfully obtain anything of value.	⌲ Imprisonment of six years or more, or ⌲ A P200,000 fine, or ⌲ both.
Failing or refusing to register a SIM – This is for PTEs who fail or refuse to register someone’s information despite compliance.	FIRST OFFENSE: ⌲ A fine not less than P100,000 but not more than P300,000. SECOND OFFENSE: ⌲ A fine not less than P300,000 but not more than P500,000. THIRD AND SUBSEQUENT OFFENSES: ⌲ A fine not less than P500,000 but not more than P1 million.
Selling off stolen SIM – This applies for PTEs, individuals, or agents.	⌲ Imprisonment not less than six months, but not more than two years, or ⌲ A fine not less than P100,000 but not more than P300,000, or ⌲ both.
Breaching of confidentiality – For PTEs, agents, employees.	⌲ A fine not less than P500,000 but not more than P4 million.
Breaching of confidentiality due to negligence – For PTEs, agents, employees.	⌲ A fine not less than P500,000 but not more than P4 million.

Is there Anything Else from the IRR I Need to Know?

In the event of the end user’s death, his or her family or relative must report it to the PTE for some weird reason (as if this isn’t given to the PSA). Just like in the case of stolen or lost SIM cards, in the case of death, the PTE is required to deactivate the SIM card within 24 hours of the report.