The Philippine Department of Information and Communications Technology (DICT) told lawmakers on August 7, 2026 that it wants ₱2.7 billion — 15% of its proposed ₱18-billion 2027 budget — to shore up the cloud hosting and cybersecurity behind eGovPH, the super-app that now stores the digital national ID, driver's license, and PhilHealth credentials for over 61 million downloads and has processed more than 900 million transactions across 1,300-plus government services. DICT Secretary Henry Aguda told reporters, "We are ready for the congressional deliberations, and we don't expect any trouble in getting this budget executed next year" (Philstar). The request sits inside the Marcos administration's ₱7.2-trillion 2027 National Expenditure Program, submitted to Congress on August 11, 2026 (DBM).
A Platform That Grew Faster Than Its Infrastructure
This is not a request to expand what eGovPH does — it is a request to keep what it already does from breaking. The app suffered service outages in April 2026 as user demand outpaced server capacity, a strain DICT now wants to fund its way out of (Inquirer). Of the ₱2.7 billion, roughly ₱800 million is earmarked for the eGovPH app itself, with the rest split across cloud infrastructure, cybersecurity tooling, developer retention, and interoperability work to connect more agency systems (GMA News). That is a fairly conventional list for an agency whose flagship product has scaled from a document locker into critical infrastructure touching a majority of the country's population.
The Steelman: More Data in One Basket Is a Bigger Target
Privacy advocates have a real case here, and it predates this budget request. Identity-theft complaints in the Philippines rose to 1,597 reported incidents in 2023, up nearly 14% year-on-year, and more than 315,000 credentials were reported compromised in just the first half of 2024 (BiometricUpdate). Fraudsters have been documented paying citizens for photographs of their physical national ID cards, which print the PhilSys Number and biographical data in plain view — vulnerable enough that Senator Panfilo Lacson introduced a bill in July 2025 to strip visible PSNs and biodata off the card entirely, pushing that information into scannable chips and QR codes instead. Consolidating driver's licenses, health records, and the national ID into a single super-app run on cloud infrastructure that was, by DICT's own admission, already buckling under load in April 2026, raises the stakes of any future breach. A platform holding 900 million transaction records for 61 million downloads is a materially more attractive target than the sum of the separate agency databases it replaced, and funding requests that arrive after outages — rather than before them — invite the fair question of whether security is being treated as core design or as a bill that comes due once things visibly break.
Why the Fix Is Still the Right Call
That case argues for scrutiny of how the ₱2.7 billion is spent, not for withholding it. The consolidation itself was never optional once Congress passed the Philippine Identification System Act (Republic Act No. 11055) in 2018, which mandates the PhilSys Number as the government's standard identifier across departments specifically to cut the fraud, duplication, and red tape that scattered agency IDs enabled (Republic Act No. 11055). Once that policy choice was made, a single well-funded, professionally hardened platform is safer than a dozen underfunded ones — the alternative to eGovPH's cloud and cybersecurity upgrade is not a world without a national digital identity, it is the same national identity system running on infrastructure that stalls under normal demand. RA 11055 also already carries teeth: Section 18 requires "reasonable and appropriate organizational, technical and physical security measures," and Section 17 backs that with ten-to-fifteen-year prison terms and fines up to ₱10 million for officials who unlawfully disclose registry data. The legal exposure for getting this wrong already exists; what has been missing is the operating budget to match it.
The Real Risk Is a Rubber Stamp, Not the Spend Itself
Aguda's confidence that Congress will pass this "without trouble" is itself worth watching. A ₱2.7-billion line item covering cloud contracts, security tooling, and an AI layer (eGovAI) deserves the same line-by-line appropriations scrutiny — audited procurement, published penetration-test results, an independent security review tied to disbursement — that any critical-infrastructure spend of this size would get in a mature digital economy. Congress should fund the upgrade; it should not wave it through. The Lacson bill to redesign the physical PhilSys card and DICT's cloud request are, properly understood, the same project: hardening a national identity system Filipinos are already required to use. Approving the money while attaching real oversight conditions is the proportionate path — starving it because concentration carries risk would just leave 61 million downloads' credentials on the infrastructure that already failed once, in April.