What happened
On September 22, 2026, the Cybercrime Investigation and Coordinating Center (CICC) gave Discord and Reddit 24 hours to set up a local presence in the Philippines, according to DualShockers. The order followed school shootings, including the Ateneo de Zamboanga University attack on August 18, which Biometric Update reports was livestreamed on Meta for 14 minutes.
On September 23, Globe and DITO blocked Discord. DualShockers reports that GOMO and TNT also blocked it, while Smart and Converge subscribers kept access, so the outage was uneven. Reddit received an extension and was not blocked.
On September 24, GMA News reported that the CICC ordered the block lifted after meeting Discord. Discord committed to:
- a local satellite office or representatives in the country;
- a "green lane" for the CICC to flag threat actors;
- facial age estimation for unverified users, without storing biometric data;
- a Global Teen Experience that places younger users in age-appropriate settings.
DICT Secretary Henry Aguda said Discord's policies needed strengthening.
The strongest case for the government
The regulators' argument deserves a fair statement. A platform with millions of Philippine users and no local contact point is hard to reach when a threat is live. Investigators need someone who answers the phone within hours. The Philippines has no way to compel a foreign company that ignores its requests, and blocking is the one lever that gets a response. It worked quickly. Discord moved in about 48 hours, and some of what it agreed to, such as a law-enforcement contact channel, is reasonable and cheap.
The problem is the route, not the destination
The same outcome could have been reached with a legal process. GMA's report cites no statute for the block. It describes the action as resting on the CICC's authority after the shootings.
That authority is thin. Republic Act 10175, the Cybercrime Prevention Act of 2012, created the CICC as an inter-agency body under the Office of the President. Its functions are cybersecurity planning, real-time assistance on active cybercrimes, monitoring of law-enforcement cases and international cooperation. Nothing in the powers described there is a licence to order nationwide access cut-offs.
The Supreme Court has already addressed this question. In Disini v. Secretary of Justice (G.R. No. 203335), it struck down Section 19 of the Cybercrime Act, which let the Department of Justice restrict or block access to computer data. The Court reasoned that an executive officer cannot decide content is illegal and block it without judicial intervention, as that officer would be "judge, jury, and executioner all rolled into one." Disini concerned content takedowns, and a whole-platform block ordered through telcos is a different mechanism. But the principle it states is that executive bodies cannot restrict speech access unilaterally. A block that cuts off every user of a communications platform tests that principle hard. A former DICT official has called the Discord block unconstitutional, per GMA's related coverage.
Collateral damage
Discord is not only a place where predators can hide. DualShockers notes it is the main coordination platform for esports teams, clans and community management, and that students and remote workers lost a working communications tool. A blunt block penalises all of those users for the failures of a few accounts, and it did nothing directly about the shooters or their networks. The concessions that matter for safety, the green lane and age assurance, were obtainable by negotiation and did not require the outage.
Why age estimation deserves scrutiny
Facial age estimation is a live policy tool, and Discord says it will not store biometric data. That is better than ID uploads. Still, a concession extracted under threat of a block is not a considered privacy decision. The National Privacy Commission, which oversees data protection in the country, was not reported as part of these talks. Mandates made under duress can harden into norms without any assessment of accuracy, false-rejection rates, or how the estimates are handled.
What comes next
The episode is a preview. Biometric Update reports the DICT expects legislation on stronger platform rules within two months, including linking the national ID to account verification and proactive content moderation. Aguda also plans to raise Big Tech accountability at ASEAN meetings in October, pointing to a regional market of nearly 700 million people.
Proactive moderation duties and national-ID linkage carry much higher stakes than a local point of contact. ID-linked accounts would end pseudonymous speech for Filipino users, and in a country with a history of prosecuting online libel that is a serious chilling effect. A proportionate package would require local representation, publish response-time standards for law-enforcement requests, and require a court order for any access block. It would also set limits on data collected for age assurance.
The takeaway
The CICC got what it wanted quickly, and that is why the method will be reused. Next time the target may be a smaller service that cannot negotiate. The Philippines should write the rules for local representation and blocking into law now, with judicial review built in, before ad hoc executive action becomes the default.