LTO moves to blacklist German tech firm Dermalog over ₱3B digital system delays, data security risks

The Land Transportation Office (LTO) is officially preparing blacklisting proceedings against German technology firm Dermalog Identification Systems GmbH. The move follows severe contractual violations tied to the ₱3.19-billion Land Transportation Management System (LTMS).

Contractual Deadlocks and Delays

LTO Executive Director Martin Ontog informed the House Transportation Committee that the LTMS remains incomplete. The system is now over 900 days past its target deadline. This delay persists despite the government granting 13 distinct contract extensions.

According to Ontog, the digital infrastructure fails to process transactions for public utility vehicles (PUVs) or automatically collect penalties on new registrations. The Commission on Audit (COA) has continuously flagged these system deficiencies for four consecutive years.

National Security and Data Exposure Risks

Lawmakers expressed urgent concerns regarding the data privacy of approximately 10 million motorists. Legislators warned that data could be exposed because a foreign entity holds exclusive operational control.

Ontog explained that Dermalog continues to withhold:

• The core system source code
• Encryption keys
• Full administrative and database access

"The LTO is effectively blind in operating, maintaining, and most critically securing the LTMS. We cannot secure a system we do not control," Ontog stated.

To counter this, the Office of the Solicitor General has petitioned the Supreme Court to legally compel Dermalog to hand over the source code immediately.

Dermalog Defends Infrastructure

Dermalog rejected the LTO's claims, stating the agency already possesses and controls the LTMS database. The contractor revealed that its own technical access to the production environment was terminated by the LTO. This restriction leaves the firm unable to deploy critical security updates and patches.

The German firm highlighted that the platform successfully handles 120,000 daily revenue transactions and holds records for over 32 million driver's licenses. Dermalog has filed a petition for a temporary restraining order and cautioned the LTO against moving forward with public blacklisting while the legal dispute remains unresolved in court.