What rights do I have over my personal data?

Under RA 10173 (Data Privacy Act), you have: (1) Right to be informed — what data is collected and why, (2) Right to access — see all data held about you, (3) Right to rectification — correct inaccurate data, (4) Right to erasure — demand deletion of data, (5) Right to object — stop processing for specific purposes, (6) Right to data portability — receive your data in usable format, (7) Right to damages — sue for privacy violations.

Can an app collect my contacts, photos, or location without asking?

No. Under the Data Privacy Act and NPC Circular 16-01, any collection of personal data requires: (1) your free and voluntary consent, (2) a clear statement of what data is collected, (3) the specific purpose, (4) the data retention period. Blanket permissions buried in Terms of Service do not constitute valid consent for sensitive data collection.

What if a lending app shared my information with third parties?

Sharing personal data with third parties requires your explicit consent under RA 10173. If a lending app sold or shared your data (e.g., to other lenders, marketing firms, or collection agencies) without your consent, this is a criminal violation. File with the NPC immediately — penalties can reach ₱5 million and 6 years imprisonment for responsible officers.

How do I request erasure of my data from a company?

Send a formal written request to the company's Data Protection Officer (DPO). Under NPC guidelines, they must respond within 15 days and act on erasure requests for data no longer needed for its original purpose. Companies must have a DPO — if they don't, this itself is a violation. Our Letter Builder can generate a DSAR (Data Subject Access Request) and erasure demand.

What is considered 'sensitive personal information' under Philippine law?

Under RA 10173, sensitive personal information includes: race, ethnic origin, marital status, age, color, religious affiliation, health and medical information, education, genetic information, criminal records, and — critically for financial complaints — government-issued IDs (SSS, GSIS, PhilHealth, Pag-IBIG, TIN, passport). Collection of SPI requires higher protection standards.

How long does the NPC take to act on a complaint?

The NPC's complaint process: (1) File online at privacy.gov.ph, (2) NPC evaluates within 5 days, (3) If accepted, mediation within 30 days, (4) If no settlement, formal investigation begins. Urgent cases (e.g., ongoing data sharing to harass borrowers) can be escalated with a request for an injunction.

🔒

Know Your Rights

Data Privacy: NPC Consumer Rights in the Philippines

The Data Privacy Act (RA 10173) gives you specific rights over your personal data. Financial apps, lenders, and companies that misuse your data — including contact lists, location data, and financial records — can be fined and criminally prosecuted.

This is informational only, not legal advice. Consult a lawyer for your specific situation. · Last revised: 2026-05-03

Ano ang gagawin MO NGAYON / What to Do TODAY

1
Document the data violation with screenshots
Screenshot: the app's permission requests at install time, any messages sent to your contacts by the app, the app's privacy policy (especially what it claims vs. what it does), and any communications from the company. If you can, do a screen recording of the app's behavior.
2
Send a DSAR (Data Subject Access Request)
Use our Letter Builder to generate a DSAR. Send it to the company's DPO by email with read receipt and registered mail. This formally triggers their 15-day response obligation. If they don't respond or refuse, this becomes additional evidence for your NPC complaint.
3
File with the National Privacy Commission
Go to privacy.gov.ph → 'File a Complaint'. You'll need: your name and contact, the company's name and DPO contact, a description of the violation, your supporting documents, and the relief you want (deletion of data, cease processing, damages). The NPC complaint is free.

Mga Tanong at Sagot / Frequently Asked Questions

Legal Basis / Mga Batas at Regulasyon

Mga Tool / Related Tools

Build a DSAR / Erasure Letter →Loan Collection Harassment Rights →File a Complaint →

Share this:Twitter/X Facebook WhatsApp Download PDF / Print

Disclaimer: This is informational only, not legal advice. Consult a lawyer for your specific situation. Content is provided for informational and educational purposes only. Citations link to official Philippine government sources.