Unauthorized GPS Data Sharing
Location and movement data shared with third parties without the borrower's written consent.
0
Documented Cases
—
Escalated / Verified
—
With Amount Disputed
Legal Basis in the Philippines
- • RA 10173 (Data Privacy Act) — explicit consent required for location data processing
- • NPC Circular 2023-04 — mandatory data breach notification
Documented Cases
+ Add YoursNo cases documented yet for this specific issue.
Be the first to put this on record.
File First Case →Did this happen to you?
File your complaint in 5 minutes. We build the formal letter, you sign and send.
By location
See how this issue appears across Filipino regions and cities.
Relevant guides
All guides →Frequently asked — Unauthorized GPS Data Sharing
Is GPS location considered personal data?
Yes. Under RA 10173, location data linked to an identified or identifiable individual is personal data; NPC Circular 20-01 treats sustained location tracking as sensitive personal information requiring explicit consent.
- Source:RA 10173 — Data Privacy Act
How do I report unauthorized GPS data sharing?
File a complaint with the National Privacy Commission at privacy.gov.ph using the official complaint form. Attach the loan contract, app permission screenshots, and any third-party correspondence showing data was shared without consent.
What can the NPC order against the data controller?
The NPC may issue cease-and-desist orders, order data deletion, impose administrative fines up to ₱5M per offence (NPC Circular 2022-01), and refer for criminal prosecution under RA 10173 (penalties up to 6 years and ₱4M).
Anong palugit para mag-file ng NPC complaint?
Ang NPC Circular 16-04 ay nagtatakda ng 1-year prescriptive period mula sa petsang nalaman ang violation; ang mas maagang filing (within 30 days) ay nakakatulong sa pag-preserve ng evidence.
Can the lender continue tracking after I pay off the loan?
No. RA 10173 §11(e) (data minimization) requires the controller to stop processing once the original purpose is fulfilled. Continued tracking after loan settlement requires fresh consent or is a documentable violation.
- Source:RA 10173 — Data Privacy Act