Senate at Office of the Rectiary TWENTIETH CONGRESS OF THE) REPUBLIC OF THE PHILIPPINES ) JAN 27 P5:25 First Regular Session SENATE RECEIVED Bi S.B. No. 1715 Introduced by SENATOR IMEE R. MARCOS AN ACT AMENDING REPUBLIC ACT NO. 11934, OTHERWISE KNOWN AS THE "SUBSCRIBER IDENTITY MODULE (SIM) REGISTRATION ACT" EXPLANATORY NOTE Article II, Section 24 of the 1987 Constitution provides that, "the State recognizes the vital role of communication and information in nation-building. "Pursuant to this national policy, it is the obligation of the State to ensure that the channels of communication and information are protected from exploitation, and that these essential tools of modern life are utilized in a manner that promotes the safety and security of all citizens. The passage of Republic Act No. 11934, or the "Subscriber Identity Module (SIM) Registration" Act was a landmark step toward accountability in digital communications. Recent data from the Philippine National Police (PNP) Anti-Cybercrime Group reveals that there is a significant decline in recorded online scams in 2025—a testament to the effectiveness of enforcement and public awareness efforts. Online scams, the most common cybercrime modus, dropped to 1,525 cases in 2025 from 3,025 in 2024. Despite this, syndicates are evolving their tactics to bypass current safeguards. This bill seeks to strengthen the current law by introducing two critical safeguards designed to curb the proliferation of cybercriminal activities. First is by limiting SIM ownership. Current regulations allow for the unrestrained registration of multiple SIM cards, a loophole frequently exploited by "click-farms" and syndicates to facilitate automated scams and phishing expeditions. This bill mandates that an end- user may only register a maximum of three (3) SIMs. This restriction aims to significantly reduce the volume of disposable numbers available for illicit use while still accommodating the legitimate needs of the general public. Lastly, this bill enhances tracking via Unique Device Identifiers. While registered SIM cards provide a link to an identity, the hardware used to facilitate crimes is often overlooked. This bill introduces the mandatory disclosure of the Unique Device
Identifier-the specific numeric code assigned to a mobile phone. By including this identifier in the information disclosed during a criminal investigation, law enforcement agencies will be better equipped to track not just the number used, but the actual physical device employed in the commission of a crime. By tightening registration limits and improving device traceability, we can foster a more secure digital environment and provide our authorities with the necessary tools to effectively combat cybercrime. In view of the foregoing, the immediate passage of this bill is earnestly sought. Fee h. Marca TIMEE R. MARCOS
Senate Office of the scartary TWENTIETH CONGRESS OF THE) REPUBLIC OF THE PHILIPPINES ) JAN 27 P5:25 First Regular Session SENAT/15 RECEIVED BY. S.B. No. Introduced by SENATOR IMEE R. MARCOS AN ACT AMENDING REPUBLIC ACT NO. 11934, OTHERWISE KNOWN AS THE "SUBSCRIBER IDENTITY MODULE (SIM) REGISTRATION ACT Be it enacted by the Senate and House of Representatives of the Philippines in Congress assembled:
Section 1. Section 3 of Republic Act No. 11934 is hereby amended to read as follows:
"Section 3. Definition of Terms. - As used in this Act: XXX (H) UNIQUE DEVICE IDENTIFIER REFERS TO THE UNIQUE NUMERIC, ALPHANUMERIC, OR ELECTRONIC IDENTIFIER ASSIGNED TO A MOBILE PHONE OR OTHER COMMUNICATION DEVICE, INCLUDING BUT NOT LIMITED TO THE INTERNATIONAL MOBILE EQUIPMENT IDENTITY (IMET), MOBILE EQUIPMENT IDENTIFIER (MEID), EMBEDDED SIM (ESIM) IDENTIFIER, OR FUNCTIONAL EQUIVALENTS, AS MAY BE RECOGNIZED UNDER EXISTING OR FUTURE INTERNATIONAL TELECOMMUNICATIONS STANDARDS, FOR IDENTIFICATION PURPOSES."
1 Sec. 2. Section 4 of Republic Act No. 11934 is hereby amended to read as follows: "Section 4. SIM Registration. - In order to regulate the registration and use of SIMs, all end-users shall be required to register their SIMs with PTEs as a pre-requisite to the activation thereof, in accordance with the guidelines set forth under this Act. PROVIDED THAT, EACH END USER, WHETHER ON POSTPAID OR PREPAID SUBSCRIPTION, MAY REGISTER NO MORE THAN THREE (3) ACTIVE SIM CARDS. NATIONAL PROVIDED, FURTHER, THAT THE TELECOMMUNICATIONS COMMISSION (NTC, IN COORDINATION WITH THE DEPARTMENT OF INFORMATION AND COMMUNICATIONS TECHNOLOGY (DICT), SHALL PROMULGATE GUIDELINES PROVIDING FOR REASONABLE EXCEPTIONS TO THE MAXIMUM NUMBER OF REGISTERED SIM CARDS FOR LEGITIMATE USES, INCLUDING BUT NOT LIMITED TO BUSINESS ENTERPRISES, GOVERNMENT AGENCIES, JOURNALISTS, MACHINE-TO-MACHINE (M2M) COMMUNICATIONS, INTERNET OF THINGS (IOT) DEVICES, AND OTHER SIMILARLY SITUATED USERS, SUBJECT TO ENHANCED REGISTRATION, VERIFICATION, AND AUDIT REQUIREMENTS. XXX"
Sec. 3. Section 10 of Republic Act No. 11934 is hereby amended to read as follows:
"Section 10. Disclosure of Information. - Notwithstanding the provisions on confidentiality, the PTEs shall be required to provide information obtained in the registration process, INCLUDING UNIQUE DEVICE IDENTIFIERS, only upon the issuance of a subpoena by a competent authority, BASED ON A FINDING OF PROBABLE CAUSE AND RELEVANCE TO A SPECIFIC CRIMINAL INVESTIGATION, pursuant
to an investigation based on a sworn complaint that a specific mobile number was or is being used in the commission of a crime or that it was utilized as a means to commit a malicious, fraudulent or unlawful act, and that the complaint is unable to ascertain the identity of the perpetrator. ALL DISCLOSURES MADE PURSUANT TO THIS SECTION SHALL BE PROPERLY LOGGED AND SUBJECT TO POST-AUDIT BY THE NATIONAL PRIVACY COMMISSION. THE COLLECTION, PROCESSING, STORAGE, AND DISCLOSURE OF UNIQUE DEVICE IDENTIFIERS UNDER THIS ACT SHALL BE STRICTLY LIMITED TO LAWFUL PURPOSES RELATED TO A SPECIFIC CRIMINAL INVESTIGATION. SUCH INFORMATION SHALL BE SUBJECT TO THE PRINCIPLES OF DATA MINIMIZATION, PROPORTIONALITY, SECURITY, AND RETENTION LIMITS IN ACCORDANCE WITH REPUBLIC ACT NO. 10173, OTHERWISE KNOWN AS THE 'DATA PRIVACY ACT OF 2012.' UNDER NO CIRCUMSTANCES SHALL UNIQUE DEVICE IDENTIFIERS BE USED FOR MASS SURVEILLANCE, PROFILING, COMMERCIAL EXPLOITATION, OR ANY PURPOSE UNRELATED TO A LAWFUL INVESTIGATION AUTHORIZED BY A COMPETENT AUTHORITY." XXX"
Sec. 4. Separability Clause. - If any portion or provision of this Act is declared
unconstitutional, the remainder of this Act or any provisions not affected thereby shall remain in force and effect.
1 Sec. 5. Repealing Clause. - All law, presidential decree or issuance, executive order, 2 letter of instruction, rule of regulation inconsistent with the provisions of this Act is hereby repealed or modified accordingly. 4 Sec. 6. Effectivity. - This Act shall take effect after fifteen (15) days following its 5 complete publication in the Official Gazette or the newspaper of general circulation. Approved,