16 SEP 2026 — The Philippine government is weighing whether the national identity system, PhilSys, should become the age check for social media. The agency that runs it says the check can confirm an age threshold without handing platforms a name.
The Philippine Statistics Authority put that case to a town hall convened by the Department of Information and Communications Technology and the Cybercrime Investigation and Coordinating Center, which heard from government agencies and digital safety advocates. Henedine Palabras, an assistant national statistician, said the ID could confirm whether someone meets an age threshold without exposing their full identity. The National Privacy Commission backed a narrower version, a check that returns yes or no on the age attribute and nothing else.
What is actually being proposed
The framework discussed at the town hall would prohibit children under 13 from using social media and impose restrictions and parental-consent requirements on users aged 13 to 17. The age check is the mechanism that would make either rule enforceable, and PhilSys, which issues a unique number backed by demographic and biometric enrolment, is the candidate.
Renato Paraiso, the CICC undersecretary who led the discussion, framed the privacy question against the way the debate usually runs: "Privacy does not equate to identifiability." He argues that authorities still need to identify the people behind threats and abuse, and that an age gate is a different instrument from a tool for anonymity.
The commission's position is the counterweight. It says it will continue to act as an independent watchdog, and it wants the technical framework settled first, with data processing, retention, third-party involvement and safeguards named as the open questions.
Why a yes-or-no check is the whole argument
Age verification usually fails in one of two ways. A self-declared birthday is weak and stops nobody. Uploading a document is invasive: it hands a platform a full identity and creates a database worth stealing.
An attribute check is the design that avoids both. The identity provider confirms that the holder is over or under a threshold, and the platform learns one bit. The choice is between a privacy-preserving attribute check and a national register of who holds which account, and the technical details of the PhilSys implementation will decide which one the Philippines builds.
The difference depends on details the government has not settled: what PhilSys logs when a check is run, how long those records live, and whether a platform or an intermediary keeps the response.
One platform has already agreed
Meta, Roblox and Discord were all named at the town hall, which is a wider set than the rule would need to cover children's accounts on social media alone: two of the three are places children play and talk rather than post.
Roblox has agreed to integrate PhilSys into its age checks, which we reported when the arrangement was voluntary. The CICC says it is convening a technical working group with Meta and Roblox this month. Meta has held discussions in Singapore about measures for the Philippine market.
PhilSys is also being used outside child safety. LandBank's use of PhilSys face verification for account opening shows the identity system already being wired into private-sector onboarding, raising the same questions about logging and retention.
Not only about age
Paraiso also said platforms that benefit from the Philippine market must respect local laws and face accountability, and called for technology firms to establish a physical presence in the country. Henry Aguda, the DICT secretary, said Big Tech accountability will be raised at ASEAN meetings in October.
Indonesia's communications minister made a near-identical argument last week about X's lack of a representative office, and Malaysia is building age verification around its national digital identity. Three governments have now landed on the same two-part demand. Verify age at the door, and be reachable in the country when something goes wrong.
The region is converging on account-level control, which is the opposite end from California's new rules on what a feed and a chatbot may do. Account rules are simple to state and hard to enforce; feature rules are hard to write and easier to audit. Both experiments are now running.
What to watch
The technical framework is the thing to read when it appears. A yes-or-no attribute check and an identity lookup look similar in a press statement and are not similar at all in what they record.
Then the legislative route. This is a policy discussion and a set of proposals, not a law: nothing published so far names a bill on track to pass, a commencement date or a penalty.
And whether the working group with Meta and Roblox produces a commitment or a pilot. Roblox has agreed to use PhilSys voluntarily; a rule that binds every platform serving Philippine users is a different proposition, and it is the one the October ASEAN meetings will test.
