2023 in Review: The Year Philippine Tech Went Mainstream — eGovPH, AI, and More

2023: The Year Digital Philippines Stopped Being a Buzzword

It is four days before Christmas, the 13th-month pay has landed, and the last of the 12.12 haul is still arriving by motorcycle — a good moment to ask how much Philippine tech changed in twelve months. Our short answer, and the reason we put together this Philippine tech 2023 recap: this was the year government services, mobile identity, and online selling all went digital-first in this country, sometimes smoothly and sometimes painfully.

Five moments define the year for us. A government super app in June. A SIM purge in July. A ransomware wake-up call in September. AI moving quietly into the office. And an e-commerce law signed weeks ago. Each ends with what it means for you in 2024.

1. The eGovPH App Put Government in Your Pocket (June)

On June 2, 2023, President Ferdinand Marcos Jr. launched the eGov PH Super App in Malacañang, at the ceremony that also kicked off National ICT Month. The promise was one app for transactions with 26 national agencies — PhilHealth, GSIS, and SSS among them — plus LGU clearances, digital IDs, e-travel, e-payments, and SIM registration.

It is still early days: features are rolling out gradually, and plenty of Filipinos have not opened the app. But the direction is clear — the agencies you deal with monthly are building for a phone screen first and a queue second.

None of that machinery is exotic anymore. A super app runs on building blocks a small business can rent by the month: servers you do not own, APIs (the connectors that let one system talk to another), and proper logins instead of a shared password. That used to be enterprise spending. Today cloud computing solutions are within reach of a ten-person company in Biñan.

SME takeaway: if government can move clearances online, your customers will expect the same of you.

2. The SIM Registration Deadline Cut Off 54 Million Lines (July)

After one extension, the deadline under RA 11934 and the SIM Registration Act, signed back on October 10, 2022, finally arrived. Registration was pushed from April 26 to July 25, 2023, with a five-day grace period running to July 30. When that window closed, more than 54 million unregistered SIM cards were deactivated.

The pain was immediate. Prepaid lines went dead mid-year, some with quiet business processes built around them. We spent part of July helping clients answer an awkward question: which company numbers receive our OTPs — the one-time passwords banks and e-wallets text you — and whose name are those SIMs under? More than one owner found the hotline on their tarpaulin belonged to a resigned employee.

Did it kill the scam texts? No. This December's wave of holiday smishing — those "your parcel is on hold" messages arriving while everyone waits for a delivery — proves registration alone was never a cure. It did make anonymous mass-texting harder, a real gain, just smaller than the headlines promised.

SME takeaway: audit the mobile numbers your business depends on — OTP receivers, GCash-linked lines, hotlines — and confirm who each is registered to.

3. The PhilHealth Ransomware Attack Was Everyone's Wake-Up Call (September)

On September 22, 2023, PhilHealth was hit by the Medusa ransomware — malicious software that locks up an organization's files and holds them hostage for payment. The attackers demanded USD 300,000 and leaked the stolen member data when it was not paid; a lapsed antivirus license, expired since April 15, 2023, was blamed as a contributing factor.

As of October 19, PhilHealth estimated that roughly 13 million members' data was covered by the breach, plus about 600 to 800 employee records — still the official picture as the year closes.

Here is the uncomfortable part. The story does not turn on brilliant hacking but on housekeeping: a renewal nobody chased. If a national agency can let a license lapse, so can a five-person shop whose "IT guy" is really the operations supervisor with an extra login. The boring checklist is the whole defense — keep security licenses current, keep one backup offline where malware cannot reach it, and give each account only the access its job needs.

Our full breakdown of the PhilHealth ransomware attack went up in October. One December note: leaked personal details are what make a scam text convincing. Somebody who knows your name and member number is easy to believe in a busy Christmas week.

SME takeaway: most breaches start with an unglamorous lapse, so calendar your renewals, backups, and access reviews before January.

4. AI Went From Curiosity to Coworker

ChatGPT went public in late November 2022, making 2023 its first full year — and the year the novelty turned into habit. Across our client base we stopped seeing AI demos and started seeing AI drafts: product descriptions, social captions, reply templates for the fifteen questions that arrive every week.

The field filled out fast. Google has Bard, Microsoft has been weaving AI "copilots" into its Office tools, and just this month Google announced its new Gemini model. These tools now sit inside software your team already pays for.

The risks came too, and they are ordinary. Staff pasting client contracts into a public chatbot. Confidently wrong "facts" going out in a brochure because nobody checked. We covered the guardrails in November — practical do's and don'ts for using ChatGPT at work — and the short version is that one written page of rules beats a ban your team will ignore.

SME takeaway: treat AI as a fast junior assistant whose work still gets checked by someone who knows the business.

5. The Internet Transactions Act Arrived Just in Time for 12.12 (December)

Barely two weeks ago, on December 5, 2023, Republic Act No. 11967, the Internet Transactions Act of 2023, was signed into law. As it happens, it landed in the middle of the country's biggest online shopping stretch — coincidence, but fitting. It protects online consumers and merchants, and mandates an Electronic Commerce Bureau under the DTI. That office does not exist yet; the law orders it built.

The marketplace obligations are the interesting part. E-marketplaces must verify online merchants — valid ID, geographic address, contact details — before listing them, and keep a registry they check regularly. Listings must clearly show product name, price, description, and condition. Regulated goods cannot be sold without permits. Consumer data must be safeguarded, and buyers given a working way to complain and seek redress.

Before anyone panics over Christmas dinner, read Section 32. It grants a transitory period — a grace window before the rules bite — of eighteen months from the law's effectivity for affected online merchants, e-retailers, e-marketplaces, and digital platforms to comply. Prepare through 2024; do not scramble this week. Our full breakdown of the Internet Transactions Act from December 6 has the provisions.

There is an upside hiding in that compliance language. Rules rewarding verified, documented sellers quietly punish the fly-by-night competition you have been losing price wars to. A real business identity — registration papers, a consistent address, a storefront beyond one marketplace listing — will count for more in 2024. That makes it a good year for professional web development on a site you own, the one no platform can suspend.

SME takeaway: sellers who look legitimate on paper are about to gain a structural advantage, so start documenting yours now.

What Our Philippine Tech 2023 Recap Means for Your 2024

Read the five moments together and they point the same way: digital by default. Government transactions moved to an app. Identity got tied to a registered SIM. Security became a matter of public accountability. Commerce picked up a rulebook. None of these assume you will be online someday — they assume you are online properly, now.

Here is the short prep list we are handing clients for January:

1. Register and document your digital identities — company SIMs, marketplace accounts, domain names, business email. Know what you own and who controls it.
2. Fix the boring security basics first — license renewals, one offline backup, and an honest look at who still has access.
3. Start your Internet Transactions Act runway early — eighteen months sounds generous until you are twelve months in with nothing documented.

That is our Philippine tech 2023 recap. From our team in Biñan to yours — happy holidays.

2023 proved that digital-first is the new normal in the Philippines, and 2024 will reward the businesses that prepared over the holidays instead of scrambling later. If your roadmap could use a second pair of eyes, we read this stuff for a living — book a free consultation and we'll take a look.