How do I file an NPC complaint against a lending app?
Last updated: 2026-07-11 · Educational content; not legal advice.
Short answer
File with the National Privacy Commission — primarily through its online eComplaint Portal at complaints.privacy.gov.ph, which issues an instant docket number and handles Data Privacy Act (RA 10173) violations by lending apps such as contact-list scraping and debt-shaming; e-mail to complaints@privacy.gov.ph is a fallback for when the portal is down. Under the NPC's 2021 Rules of Procedure (NPC Circular 2021-01, as amended by NPC Circular 2024-01), it's recommended — not mandatory — to notify the lender (its Data Protection Officer) first and give it a chance to respond; keep that written notice as an exhibit if you send one. Your complaint must be a sworn/verified statement identifying the lending company (the data controller), describing the violation, the relief requested, and a Certification against forum shopping, plus evidence — screenshots of the messages, the app's permission screen, and your loan record. Filing is free for data subjects, needs no lawyer, and can be done online.
Need a letter for this?
Primary sources
Frequently asked
Do I have to contact the lender first?
It's recommended, not mandatory. Under the NPC's 2021 Rules of Procedure (NPC Circular 2021-01), notifying the personal information controller and giving it a reasonable chance to respond strengthens your file and can resolve the issue faster — but the NPC may still act on a complaint, especially for serious violations, without it. If you do notify the lender, send it in writing and keep proof.
Where do I file — portal or email?
File through the NPC's eComplaint Portal at complaints.privacy.gov.ph first — it's the primary channel and gives you an instant docket number. E-mail to complaints@privacy.gov.ph is a fallback for when the portal is unavailable.
What do I attach to the complaint?
A sworn/verified complaint stating the parties, the facts, the rights you believe were violated, and the relief requested, plus a Certification against forum shopping — some filings are notarized; use the NPC's complaint template as your guide. Attach your evidence (screenshots of the messages and permission screen, loan documents, the lender's SEC registration name), any written notice to the lender, and valid ID.
Is there a deadline?
Yes. Under NPC Circular 2021-01 §6, you generally have 1 year from when you discovered the violation to file, but not more than 5 years from when it was committed; filing a complaint or pursuing alternative dispute resolution interrupts that period. File early — evidence like app messages can disappear.
Is there a filing fee?
No, filing is free for data subjects. Only a corporation filing a complaint for competitive-harm reasons pays a ₱1,000 fee.
Take action
Got a similar problem?
File a complaint and we'll pre-fill BSP, SEC, DTI, and small-claims letters for you.
Contact-list scraping, unauthorized data use, and how to file with the NPC.