The Data Center and Cloud Service Directives envisages, in its preamble, the encouragement of secure and confidential storage of data, generated by the government, public and private sectors through the use of information technology within the country.

Data center and cloud service providers are required to be listed with the Department of Information Technology prior to providing their services. The Directives also mandates data center and cloud service recipients to only procure services from service providers enlisted with the Department of Information Technology.

This is also reflected in the Payment Systems-Related Unified Directives, whereby licensed payment institutions may only host their data centers with entities officially listed by the Department of Information Technology to operate as a data center, and are required to verify whether their existing data centers have been listed within the timeframe specified in the Data Center and Cloud Service Directive.