How do I report a data privacy violation in the Philippines?
Last updated: 2026-05-04 · Educational content; not legal advice.
Short answer
File with the National Privacy Commission (NPC) — primarily through its online eComplaint Portal at complaints.privacy.gov.ph, which issues an instant docket number; e-mail to complaints@privacy.gov.ph is a fallback if the portal is down. The Data Privacy Act of 2012 (RA 10173) gives the NPC authority to investigate, order data deletion, fine controllers, and refer criminal cases to the DOJ. The complaint must be a sworn/verified statement identifying the data controller, describing the alleged violation, and attaching documentary evidence.
Need a letter for this?
Primary sources
Frequently asked
Is there a filing fee?
No, filing is free for data subjects (only corporations filing a complaint for competitive-harm reasons pay a ₱1,000 fee). File through the online eComplaint Portal (complaints.privacy.gov.ph) — the primary channel, which issues an instant docket number — with e-mail (complaints@privacy.gov.ph) and walk-in at the NCR field office as fallbacks.
How long do I have to file?
Under NPC Circular 2021-01 §6 (2021 Rules of Procedure), you generally have 1 year from the date the complainant knew of the violation to file, but not more than 5 years from when it was committed; filing a complaint or pursuing alternative dispute resolution interrupts that period.
What can the NPC actually do?
Issue cease-and-desist orders, order deletion of data, impose administrative fines (up to ₱5M per offence under NPC Circular 2022-01), and refer for criminal prosecution under RA 10173 (penalties up to 6 years and ₱4M).
Take action
More questions
Is there a filing fee?
No. NPC complaints are filed without charge; the agency accepts online portal, e-mail (complaints@privacy.gov.ph), and walk-in submissions.
Anong evidence ang dapat i-attach?
Loan contract, app permission screenshots, third-party messages na may PII, breach notification email, at lahat ng written correspondence sa data controller.
Related companies
Got a similar problem?
File a complaint and we'll pre-fill BSP, SEC, DTI, and small-claims letters for you.
Contact-list scraping, unauthorized data use, and how to file with the NPC.