General information, not legal advice. This answer was written by the PhilippineLaws team from the law it cites and checked for accuracy to the best of our knowledge, last on Sep 29, 2026. It has not been reviewed by a lawyer. Read the cited law yourself, and for your own situation talk to a lawyer or the Public Attorney’s Office (PAO).
Someone posted my private chat, phone number, and address online. Can I sue for doxxing?
Yes. Publishing your private mobile number, residential address, or intimate chat messages online without your consent is illegal under the Data Privacy Act of 2012 (Republic Act No. 10173) and carries higher penalties under the Cybercrime Prevention Act. You can file a formal complaint with the National Privacy Commission (NPC) and file criminal charges for unauthorized disclosure.
Illustrated Legal Brief
Full PlateAllowed: Preserve unedited digital evidence
Capture full screenshots with URLs, timestamps, account IDs, and the exposed data
Submit platform takedown report
Report violation to social media platform to curb ongoing public exposure
Allowed: File NPC complaint for privacy violation
Submit formal complaint for unauthorized disclosure under RA 10173
Allowed: PNP Anti-Cybercrime investigation
Issue cybercrime warrants to subpoena ISP logs and prosecute the perpetrator
Under RA 10173 Sec. 31, malicious disclosure of personal data carries 1 to 3 years imprisonment and fines up to ₱1,000,000.
Why
Under the Data Privacy Act of 2012 (Republic Act No. 10173), personal information and sensitive personal information are protected by law. Publishing someone's private mobile number, residential address, personal email, ID cards, family details, or private group chat conversations without consent is commonly known as 'doxxing' and constitutes an actionable privacy violation.
Section 31 of RA 10173 penalizes 'Malicious Disclosure'—disclosing personal information with malice or in bad faith—with imprisonment ranging from one (1) to three (3) years and a fine of ₱500,000 to ₱1,000,000. When the information exposed is sensitive personal information (such as health data, marital status, or government-issued IDs), the penalty increases to up to five (5) years imprisonment and fines up to ₱2,000,000.
Because the offense is committed over the internet, social media platforms, or messaging apps, Section 6 of Republic Act No. 10175 (the Cybercrime Prevention Act of 2012) applies. It raises the penalty for crimes defined under the Revised Penal Code and special penal laws by one degree when committed by, through, or with the use of ICT.
Furthermore, if the doxxing includes slut-shaming, sexist insults, or unwanted sexual remarks, it constitutes Gender-Based Online Sexual Harassment under Section 12 of Republic Act No. 11313 (the Safe Spaces Act), which carries independent criminal penalties and allows the victim to seek a protection order.
Even if the communication took place in a group chat (GC), Philippine jurisprudence confirms that participants in closed group conversations possess a reasonable expectation of privacy against unauthorized public broadcast. Leaking confidential group chat exchanges to incite a public mob or cause damage creates civil liability for damages under Articles 19, 20, 21, and 26 of the Civil Code.
People also read
Someone keeps threatening me by text and chat, saying they'll hurt me or my family. Is that a crime, and what can I do?
Yes, it can be. Threatening to inflict on you or your family, or on your property, a wrong that would itself be a crime, such as killing, hurting, or burning, is grave threats under Article 282 of the Revised Penal Code; threats of lesser wrongs are light threats or other light threats. When the threat is sent through text, chat, or social media, the Cybercrime Prevention Act raises the penalty by one degree, so save the messages and report them.
Not lawyer-reviewedRead the answer
Can I be sued for cyberlibel over a Facebook post or comment?
Yes. Defamatory Facebook posts or comments can constitute cyberlibel under Republic Act No. 10175, which carries a heavier penalty than ordinary libel. However, truth published with good motives and for justifiable ends is a defense, and the Supreme Court has held that cyberlibel cannot be applied to people who merely receive a post and react to it, such as by liking or sharing it, without adding defamatory remarks of their own.
Not lawyer-reviewedRead the answer
Can private messages or venting in a private group chat (GC) be charged as cyberlibel?
Yes, it can — if the message is seen by a third person. Under Philippine law, 'publication' does not require a public post; communicating defamatory remarks to even one person other than the victim satisfies the publication element. However, the prosecution must still prove malice, defamatory character, and the exact identity of the sender.
Not lawyer-reviewedRead the answer
I was scammed through GCash or online bank transfer. How can I recover my money and file criminal charges?
Report the fraud to GCash or your bank's fraud desk right away and ask them to hold the disputed funds in the recipient account, then file a cybercrime report with the PNP Anti-Cybercrime Group (PNP-ACG) or NBI Cybercrime Division. Recovery is not guaranteed and depends largely on whether the money is still in the recipient account. Under the Anti-Financial Account Scamming Act (AFASA / RA 12010) and the Cybercrime Prevention Act, scammers and money mules can face imprisonment and fines.
Not lawyer-reviewedRead the answer