By: Atty. Gregorio B. Austral, CPA
E-governance
The enactment of Republic Act No. 12254, known by its short title, the “E-Governance Act,” formalizes the State’s dedication to modernizing public service through technology. This Act recognizes the critical role of information and communication in nation-building and the necessity of leveraging information and communications technology (ICT) to propel national development and progress. The core policy adopted by the State is to foster and maintain a digitally empowered and integrated government through a regulated, secure, and robust information and communication system. This transformation aims to facilitate responsive and transparent online citizen-centered services, balancing the rights to freedom of information and data privacy while striving for ethical, accountable, and transparent governance.
The mandate of the E-Governance Act is exceptionally broad, encompassing virtually the entire governmental structure. The law applies to all executive, legislative, judicial, and constitutional offices. This extensive coverage includes local government units (LGUs), state universities and colleges (SUCs), and government-owned or-controlled corporations (GOCCs). The scope extends beyond merely front-facing public interactions, covering both business- and non-business-related transactions, as well as crucial back-end government operations, including data sharing and processing between and among agencies for policy, planning, and decision-making purposes. This holistic approach is designed to define the specific roles and responsibilities of various agencies in the digital transition process.
A central purpose of E-governance is to build public trust and enhance citizen participation by improving accessibility and transparency. The government is mandated to provide citizen-centered information and services. To ensure effective service delivery and accountability, all E-Government platforms must incorporate a real-time citizen feedback mechanism. The resulting data collected from this mechanism—allowing users to rate services, provide comments, and report issues—must be publicly aggregated and published quarterly to ensure transparency and guide improvements. Furthermore, agency heads must ensure that the availability of government information and services is not diminished for individuals who lack internet access, requiring the pursuit of alternate delivery modes, either electronically or manually.
Integral to upholding trust and the rule of law in the digital sphere are stringent privacy and security mandates. The E-Governance Act demands that all agencies adopt Privacy-by-Design, Privacy Engineering, and Privacy-by-Default principles when developing and deploying systems, processes, and software applications that handle personal data. Moreover, the Department of Information and Communications Technology (DICT), the lead implementing body, is required to conduct a mandatory Privacy Impact Assessment (PIA) on proposed systems processing personal data within the E-Government Master Plan (EGMP) before they are published. All government agencies are responsible for implementing information security protections commensurate with the risk of harm resulting from unauthorized access or disruption.
To enforce efficiency and accountability internally, the Act establishes several high-level, integrated information systems. For instance, to ensure fiscal discipline, fund allocation efficiency, and operational effectiveness, the DICT must jointly develop an Integrated Financial Management Information System (IFMIS) with the Department of Budget and Management (DBM), Department of Finance, and the Commission on Audit. The IFMIS will harmonize existing financial systems to enable real-time, online accounting monitoring, and control of obligations and disbursements. This emphasis on integration extends through the establishment of the Integrated Government Network (IGN), which is intended to serve as the interconnected, interoperable, and secure primary means for sharing resources, information, and data across all branches and levels of government.
Driving this comprehensive digital shift are accountable leaders within each agency. All covered government entities must create a plantilla position for a Chief Information Officer (CIO). The CIO is tasked with advising the agency on leveraging ICT to optimize service delivery, ensuring secure maintenance and management of information systems, and guaranteeing that ICT programs and operations comply with national policies and prevailing industry standards. Ultimately, the heads of all government agencies are held accountable for ensuring their offices adhere to all requirements of the Act, including compliance with cybersecurity, resiliency, and data privacy protocols promulgated by the DICT in consultation with the National Privacy Commission (NPC). (E-Governance Act, Republic Act No. 12254, [September 5, 2025])