Global Mobility Service Philippines, Inc. — Unauthorized GPS Data Sharing
Location and movement data shared with third parties without the borrower's written consent.
Unauthorized GPS data sharing by Global Mobility Service Philippines sits at the intersection of consumer-finance regulation and the Data Privacy Act of 2012. Borrowers consented — usually via a single-page tick-box — to GMS receiving telemetry from the MCCS device for the purpose of credit risk management. Where complaints arise is when that telemetry is shared with insurance partners, fleet operators, or marketing affiliates without a separate, granular consent, and where the borrower cannot exercise the RA 10173 right to access, correct, or withdraw consent without losing the underlying loan.
The NPC has been clear in past resolutions (e.g. against fintechs that read contact lists without consent) that bundling consent into the loan-acceptance click is not a valid lawful basis for downstream processing. This page documents what is on the public record for GMS Philippines, the documented complaint pattern, and the NPC complaint path — Section 16 rights, the NPC complaint form, and the timeline for an investigation. If your data was shared, your complaint is also evidentiary support for the systemic-practice claim against GMS.
Legal basis (Philippines)
See the issue page for the full citation list. Primary statutes implicated by unauthorized gps data sharing include RA 11765 (FCPA, 2022), RA 3765 (Truth in Lending Act), RA 10173 (Data Privacy Act), BSP Circular 1048 / 1133 / 1160, and SEC MC 18 (2019) where applicable.
Public record — Global Mobility Service Philippines, Inc. × Unauthorized GPS Data Sharing
No documented public-record events for Global Mobility Service Philippines, Inc. on unauthorized gps data sharing yet — be the first to file.
(6 other public-record entries exist for Global Mobility Service Philippines, Inc. on unrelated issues — see the company record page.)
File the first complaint →Documented complaints
No complaints documented yet for Global Mobility Service Philippines, Inc. on this issue.
File the first complaint →Recommended actions
- 1.Document the disable event and pull the MCCS log
- 2.Email the Global Mobility Service Philippines, Inc. legal & compliance team
- 3.File concurrently with SEC EIPD and NPC (data side)
- 4.Join the Global Mobility Service Philippines, Inc. cohort for coordinated filing
- 5.Small-claims for documented downtime (≤ ₱400,000)
Related questions
Can my GPS device be remotely disabled if I miss a payment?
There is no Philippine statute that expressly authorises remote engine disable as a self-help remedy. The Civil Code (Articles 1484 and 1524) requires judicial action to recover or restrict use of a financed vehicle once the buyer is in possession; BSP Circular 1048 and SEC MC 18 prohibit collection practices that deprive a borrower of livelihood without due process. Lenders relying on installed kill-switch devices (e.g., MCCS by Global Mobility Service Philippines) operate in a regulatory gap that has not been blessed by BSP, SEC, NPC, LTFRB, or the courts.
How do I report a data privacy violation in the Philippines?
File with the National Privacy Commission (NPC) — primarily through its online eComplaint Portal at complaints.privacy.gov.ph, which issues an instant docket number; e-mail to complaints@privacy.gov.ph is a fallback if the portal is down. The Data Privacy Act of 2012 (RA 10173) gives the NPC authority to investigate, order data deletion, fine controllers, and refer criminal cases to the DOJ. The complaint must be a sworn/verified statement identifying the data controller, describing the alleged violation, and attaching documentary evidence.
Can a lender remotely shut off my motorcycle or car?
No Philippine law gives a lender the right to remotely shut off your motorcycle or car. Immobilising a financed vehicle with a GPS kill-switch is a form of self-help repossession, and there is no self-help repossession in the Philippines: once the vehicle is in your possession, a lender that wants to recover it or restrict its use must go through the courts — a replevin action under Rule 60 of the Rules of Court, enforced by a sheriff, or foreclosure of the chattel mortgage through a public officer under Act No. 1508. A contract clause 'authorising' remote disabling does not override this, because the Civil Code voids any stipulation that lets the seller escape the limits of the Recto Law (Art. 1484). Where the financier is SEC-registered — as Global Mobility Service Philippines is — using immobilisation to pressure payment is complainable to the SEC under RA 11765 and SEC MC 18, and the continuous location tracking behind it engages the Data Privacy Act (RA 10173).
Is a GPS kill-switch legal in the Philippines?
No Philippine statute authorises a GPS kill-switch — a remote engine-disable device — as a way to enforce a loan or repossess a vehicle. The device operates in a regulatory gap: remotely restricting your use of a vehicle already in your possession conflicts with the Civil Code's requirement of judicial process to recover or foreclose a financed chattel (Recto Law, Art. 1484; Chattel Mortgage Law, Act No. 1508; replevin under Rule 60), and the continuous location tracking it needs is regulated personal-data processing under the Data Privacy Act (RA 10173). No BSP, SEC, NPC, LTFRB, or court issuance has blessed the practice. Lenders such as Global Mobility Service Philippines deploy MCCS kill-switch units within that unresolved gap.
Is it legal for a lender to track my vehicle's location 24/7?
Continuous GPS tracking of a borrower is personal-data processing under the Data Privacy Act (RA 10173) and is only lawful if it meets the Act's requirements: a legitimate, declared purpose, freely-given and specific consent (or another lawful basis), transparency, and proportionality — the data collected must not exceed what the stated purpose needs. Round-the-clock location logging to secure a loan can fail the proportionality and consent tests, and the National Privacy Commission (NPC) has jurisdiction to investigate, order deletion, and penalise. Global Mobility Service Philippines and similar lenders are data controllers accountable under RA 10173 for the location data their devices collect.
Can they disable my vehicle while I'm driving?
No — remotely cutting a vehicle's engine while it is in motion or in traffic endangers the driver, passengers, and the public, and no Philippine law authorises a lender to do it. There is no legal power of self-help immobilisation to begin with (recovery of a financed vehicle runs through the courts — replevin under Rule 60 or foreclosure under Act No. 1508), and an immobilisation that creates a safety hazard can expose the lender to civil liability for damages under the Civil Code and, depending on the facts, criminal exposure such as grave coercion (Revised Penal Code Art. 286). If a kill-switch endangered you, document it immediately and report it to the SEC (RA 11765) and the NPC (RA 10173).
Related guides — Unauthorized GPS Data Sharing
Did this happen to you?
File a complaint and we will pre-fill your BSP, SEC, DTI, and small-claims letters.
Frequently asked — Global Mobility Service Philippines, Inc. × Unauthorized GPS Data Sharing
Is GPS location considered personal data?
Yes. Under RA 10173, location data linked to an identified or identifiable individual is personal data; NPC Circular 20-01 treats sustained location tracking as sensitive personal information requiring explicit consent.
- Source:RA 10173 — Data Privacy Act
How do I report unauthorized GPS data sharing?
File a complaint with the National Privacy Commission at privacy.gov.ph using the official complaint form. Attach the loan contract, app permission screenshots, and any third-party correspondence showing data was shared without consent.
What can the NPC order against the data controller?
The NPC may issue cease-and-desist orders, order data deletion, impose administrative fines up to ₱5M per offence (NPC Circular 2022-01), and refer for criminal prosecution under RA 10173 (penalties up to 6 years and ₱4M).
Anong palugit para mag-file ng NPC complaint?
Sa ilalim ng NPC Circular 2021-01 §6 (2021 Rules of Procedure), karaniwang 1 taon mula sa petsang nalaman ang violation ang palugit para maghain, ngunit hindi hihigit sa 5 taon mula nang gawin ang paglabag; ang mas maagang filing ay nakakatulong sa pag-preserve ng evidence.
Can the lender continue tracking after I pay off the loan?
No. RA 10173 §11(e) (data minimization) requires the controller to stop processing once the original purpose is fulfilled. Continued tracking after loan settlement requires fresh consent or is a documentable violation.
- Source:RA 10173 — Data Privacy Act
Is GMS Philippines licensed by the BSP?
Global Mobility Service Philippines, Inc. is SEC-registered as a financing company; it is not BSP-supervised. SEC oversight is exercised through the lending and financing-company rules (RA 9474, RA 8556) and SEC MC 18 on collection conduct.
Can GMS legally disable my vehicle remotely if I miss a payment?
There is no Philippine statute that expressly authorises remote engine disable. Civil Code Articles 1484 and 1524 (Recto Law) require judicial process to recover or restrict use of a financed vehicle; BSP Circular 1048 and SEC MC 18 prohibit collection that deprives livelihood without due process.
- Source:Civil Code Art. 1484 (Recto Law)
- Source:BSP Circular 1048
- Source:SEC Memorandum Circular 18, s. 2019
What is MCCS?
MCCS (Mobility Cloud Connecting System) is the IoT GPS device installed by GMS Philippines on financed vehicles. It transmits location data and supports remote engine disable; it is the subject of complaints filed with NPC and SEC.
How do I file a complaint against GMS Philippines?
File simultaneously with the SEC via the I-Message Mo portal (imessage.sec.gov.ph, Financing and Lending Companies Department) for collection-conduct violations and with NPC for unauthorized location-data processing. RA 11765 also applies if GMS partners with a BSP-supervised lender.