Discovering that someone secretly recorded you, forwarded an intimate video, posted private images online, or threatened to expose them can be frightening and humiliating. Philippine law treats these acts as serious offenses. Republic Act No. 9995 protects people against the unauthorized recording and distribution of sexual or intimate images—even when the original recording was consensual. This guide explains what the law covers, who may be held liable, the penalties involved, how to preserve digital evidence, where to file a complaint, and what additional remedies may be available.

What Is the Anti-Photo and Video Voyeurism Act?

Republic Act No. 9995, officially called the Anti-Photo and Video Voyeurism Act of 2009, protects the dignity and privacy of every person.

The law applies to any person who:

Secretly photographs or records someone engaged in a sexual act or similar activity;
Captures an image of someone’s private area without consent and under circumstances where privacy is reasonably expected;
Copies or reproduces a covered photo or video;
Sells or distributes it; or
Publishes, broadcasts, shows, or exhibits it through the internet, mobile phones, messaging apps, physical media, or similar methods.

The victim may be a woman, man, LGBTQ+ person, Filipino, foreign national, spouse, dating partner, employee, student, tenant, hotel guest, or any other individual. The law does not require the victim and offender to have a particular relationship. (Lawphil)

What counts as a “private area”?

RA 9995 specifically includes the:

Naked or undergarment-clad genitals;
Pubic area;
Buttocks; and
Female breast.

The law also covers recordings of a person or group performing a sexual act or a similar intimate activity.

What is a “reasonable expectation of privacy”?

A reasonable expectation of privacy exists when a person reasonably believes that they can undress or expose a private area without being photographed or recorded.

Common examples include:

A bathroom or comfort room;
A bedroom;
A changing room or fitting room;
A shower area;
A hotel room;
A private residence;
A clinic or treatment room;
A staff locker room;
A private video call; or
A secluded location where a private body part should not ordinarily be visible.

The location does not have to be privately owned. RA 9995 expressly recognizes that a person may have a reasonable expectation that a private area will not be visible even while in a public place.

In XXX261049 v. People of the Philippines, G.R. No. 261049, June 26, 2023, the Supreme Court affirmed the conviction of a man who concealed a mobile phone inside a soap box to record relatives while they were bathing. The Court held that the victims plainly had a reasonable expectation of privacy inside the bathroom. It also ruled that circumstantial evidence can be enough to prove who made the recordings when the circumstances, taken together, establish guilt beyond reasonable doubt. Read the Supreme Court decision. (Supreme Court E-Library)

What Acts Are Punishable Under RA 9995?

Section 4 of RA 9995 creates several separate prohibited acts.

Prohibited act	Practical example
Secretly taking a photo or video	Hiding a phone in a bathroom to record someone bathing
Capturing a private area without consent	Taking an “upskirt” photo or recording through a changing-room partition
Copying or reproducing the material	Saving the file to another phone, cloud account, USB drive, or group-chat folder
Selling or distributing it	Sending copies in exchange for money or circulating them to friends
Publishing or broadcasting it	Uploading it to Facebook, TikTok, X, Instagram, Telegram, a website, or an adult-content platform
Showing or exhibiting it	Playing the video for coworkers, classmates, friends, or customers

A person does not need to be the original photographer to face liability. Someone who receives the material and then deliberately copies, forwards, uploads, sells, or publicly shows it may also be investigated under RA 9995.

Consent to recording is not consent to sharing

One of the most important rules under RA 9995 is that agreeing to be recorded does not automatically authorize distribution.

For example:

A couple voluntarily makes an intimate video for private use.
One partner later sends it to a group chat after the relationship ends.
The person shown in the video never gave written permission for the sharing.

The sharing may violate RA 9995 even though both parties originally consented to making the video. Sections 3 and 4 make the copying, distribution, publication, or broadcast unlawful without the required consent, notwithstanding consent to the original recording. (Lawphil)

Marriage, cohabitation, engagement, or a past sexual relationship does not create permanent consent. A spouse or former partner does not own the other person’s privacy merely because the material was created during the relationship.

What RA 9995 Does Not Automatically Cover

Not every unwanted photograph is photo or video voyeurism under RA 9995.

The law may not apply when:

The image does not show a sexual act, similar intimate activity, or a legally defined private area;
The photograph was taken openly in a place where no reasonable expectation of privacy existed;
The person consented to both the recording and the particular use or distribution involved; or
The material is entirely fabricated and does not involve the actual capture of the person’s private area or sexual activity.

An ordinary street photograph, an unflattering social-media post, or a workplace video that does not contain intimate content is not automatically an RA 9995 offense. It may still violate the Data Privacy Act, the Safe Spaces Act, workplace rules, school regulations, civil privacy rights, or other laws depending on the circumstances.

What about sexual deepfakes and AI-generated nude images?

A purely fabricated sexual deepfake may not fit every traditional element of RA 9995 because the statute focuses on taking, capturing, copying, or distributing covered recordings or images. However, creating or circulating a sexual deepfake may fall under other laws, particularly when it is used to humiliate, harass, threaten, impersonate, or damage an identifiable person.

Possible laws include:

The Safe Spaces Act;
The Data Privacy Act;
Cybercrime-related laws;
Civil Code provisions on privacy, dignity, and damages;
Laws against defamation or threats; and
Child-protection laws if a minor is depicted.

The National Privacy Commission has also recognized the serious privacy risks caused by AI-generated imagery and non-consensual intimate content. (National Privacy Commission)

Penalties Under RA 9995

A person convicted of violating Section 4 may be sentenced to:

Imprisonment of three to seven years;
A fine of ₱100,000 to ₱500,000; or
Both imprisonment and a fine, at the court’s discretion.

Additional consequences may apply:

If the offender is a corporation or other juridical person, its license or franchise may be revoked, and responsible officers may be held liable.
A public officer, government employee, or professional may also face administrative proceedings.
A foreign offender may be placed in deportation proceedings after serving the sentence and paying the fine. (Lawphil)

Because the maximum imprisonment exceeds six years, an RA 9995 prosecution ordinarily falls within the original jurisdiction of the Regional Trial Court, not the Municipal or Metropolitan Trial Court. A preliminary investigation is also required because the prescribed penalty exceeds four years, two months, and one day. (Lawphil)

Possible higher penalty when the internet or a computer system is used

When an offense under a special law is committed through information and communications technology, prosecutors may consider Section 6 of RA 10175, the Cybercrime Prevention Act of 2012. That provision can increase the applicable penalty by one degree when its requirements are met.

This becomes relevant when intimate material is uploaded, emailed, posted on social media, stored for distribution through cloud services, or transmitted through messaging applications. The Supreme Court upheld the general validity of Section 6 in Disini v. Secretary of Justice. (Lawphil)

Other Laws That May Apply

A single incident can potentially violate several laws. Whether multiple charges are proper depends on the specific acts and the distinct elements of each offense.

Law	When it may apply
RA 9995	Secret recording, copying, distribution, or publication of intimate images
RA 10175	The offense was committed through a computer system, internet service, social-media platform, or electronic device
RA 11313, Safe Spaces Act	Online sexual harassment, unwanted sexual content, threats, cyberstalking, or unauthorized sexual posts
RA 9262, Anti-VAWC Act	A husband, former husband, boyfriend, former boyfriend, dating partner, or father of a woman’s child uses the material to cause emotional anguish, public ridicule, or humiliation
RA 10173, Data Privacy Act	Personal or sensitive information is unlawfully collected, processed, disclosed, or shared
RA 11930	A child is depicted in online sexual abuse or child sexual abuse or exploitation material
Civil Code, particularly Articles 19, 20, 21 and 26	The victim seeks damages, prevention of further harm, or other civil relief for invasion of privacy and abusive conduct

The Safe Spaces Act expressly covers gender-based online sexual harassment, including unauthorized sexual recordings, threats, unwanted sexual remarks, cyberstalking, and the non-consensual uploading or sharing of photos and videos. (Lawphil)

For a woman abused by a spouse, former spouse, dating partner, former dating partner, sexual partner, or the father of her child, the Anti-Violence Against Women and Their Children Act may apply when the conduct causes mental or emotional anguish, public ridicule, or humiliation. A protection order may also be available when the legal requirements are present. (Lawphil)

Photos and videos can also contain personal or sensitive personal information. The National Privacy Commission has emphasized that sharing identifiable photos and videos must have a lawful basis and comply with transparency, legitimate purpose, and proportionality under the Data Privacy Act. (National Privacy Commission)

If the person shown was below 18 when the material was created, RA 11930, the Anti-OSAEC and Anti-CSAEM Act, may impose significantly more serious liability. The material should not be forwarded, downloaded unnecessarily, or shown to other people. It should be reported directly to law enforcement and the platform. (Lawphil)

What to Do If Your Intimate Photo or Video Was Taken or Shared

1. Protect your immediate safety

If the offender is threatening violence, stalking you, demanding money, or trying to force you to meet, prioritize physical safety.

Do not meet the person alone. Save the threats, inform someone trustworthy, and report urgent danger to the police. If the offender is a spouse or dating partner, ask the Women and Children Protection Desk about protection-order procedures where applicable.

2. Preserve evidence before requesting removal

Online material can disappear quickly. Preserve enough evidence to identify:

The account or profile;
The username and display name;
The exact URL;
The date and time you saw it;
The date and time of messages or threats;
The platform or application;
The group name and members, if relevant;
Captions, comments, reactions, shares, and view counts;
Phone numbers, email addresses, payment requests, or account numbers; and
People who personally saw the material.

Take full-screen screenshots that include the account name, date, time, URL, and surrounding conversation. A screen recording can help show how the content was accessed and where it appeared.

Keep the original files. Avoid cropping, annotating, filtering, compressing, or repeatedly converting them. Save copies to secure storage and record who handled each device or file.

3. Do not circulate the content while asking for help

Do not forward the intimate file to friends, coworkers, relatives, bloggers, or group chats merely to prove that it exists. That can enlarge the harm and may create legal issues for people who copy or distribute it.

Because Section 4(b) broadly prohibits unauthorized copying, preserve only what is reasonably necessary for reporting and evidence. Whenever possible, allow trained investigators to make forensic copies.

Do not hack into an account, guess a password, install spyware, or secretly access a locked device. Section 7 of RA 9995 provides that material obtained or secured in violation of the law may be inadmissible. Evidence gathered through unauthorized account or device access can also raise issues under the Cybercrime Prevention Act and privacy laws.

4. Report the content to the platform

Use the platform’s reporting system and select the option for:

Non-consensual intimate imagery;
Nudity or sexual content shared without permission;
Sexual exploitation;
Privacy violation;
Harassment; or
Threats or blackmail.

Facebook states that the quickest way to report a privacy-violating photo or video is through the report link beside the content. See Facebook’s privacy-reporting guidance. (Facebook)

Removal by a platform does not erase the criminal offense. Preserve evidence before the content is taken down.

5. Request removal from search results

Removing a Google result does not remove the material from the original website, but it can make the content substantially harder to find.

Google accepts requests involving real or fabricated sexual content showing an identifiable person. Use Google’s process for removing personal sexual content from search results. (Google Help)

Adults who still possess the original intimate image or video may also use StopNCII.org. The service creates a digital fingerprint, called a hash, on the user’s device and shares the hash—not the intimate file itself—with participating platforms to help detect and prevent matching uploads. (StopNCII.org)

6. Report the incident to cybercrime investigators

Reports involving phones, social media, websites, cloud storage, email, or messaging applications may be brought to:

The PNP Anti-Cybercrime Group or one of its regional or local cybercrime units;
The NBI Cybercrime Division;
The nearest police station, particularly its Women and Children Protection Desk when appropriate; or
The city or provincial prosecutor’s office.

The Department of Justice identifies the PNP Anti-Cybercrime Group and NBI Cybercrime Division as primary offices for cybercrime complaints. (Cybercrime Division)

Bring the affected device when possible, together with a charger and a written timeline. Do not reset the phone, delete the conversation, factory-reset the device, or reinstall the relevant application before investigators can examine it.

7. Prepare a detailed complaint-affidavit

A complaint-affidavit is a sworn written statement explaining what happened. It should clearly state:

Your identity and contact details;
The identity of the offender, if known;
Your relationship with the offender;
Where and when the recording was made or discovered;
Why you expected privacy;
Whether you consented to the recording;
Whether you gave written consent to copying or distribution;
How the material was copied, sent, posted, sold, or shown;
The accounts, devices, phone numbers, and platforms involved;
Any threats, demands, blackmail, stalking, or harassment;
The harm caused; and
The evidence and witnesses supporting the complaint.

Attach screenshots, printouts, URLs, device information, witness affidavits, platform reports, takedown confirmations, and relevant messages.

Electronic evidence must eventually be authenticated. Under the Rules on Electronic Evidence, the person presenting an electronic document generally bears the burden of proving its authenticity and reliability. Testimony from a participant in the conversation, the person who captured the screenshot, a device owner, or a forensic examiner can be important. (Lawphil)

How an RA 9995 Criminal Complaint Proceeds

1. Police or NBI investigation

Investigators may:

Interview the complainant and witnesses;
Examine screenshots and devices;
Conduct forensic extraction;
Identify account holders or subscribers;
Prepare preservation requests;
Coordinate with platforms or service providers;
Apply for cybercrime warrants or other judicial orders; and
Refer the case to the prosecutor.

Platform and subscriber records may take time to obtain, particularly when the company is located outside the Philippines.

2. Preliminary investigation before the prosecutor

The complaint is ordinarily filed with the appropriate city or provincial prosecutor’s office. The prosecutor evaluates whether the evidence supports filing a criminal Information in court.

The respondent is usually directed to submit a counter-affidavit and supporting evidence. The prosecutor may require clarificatory submissions or a hearing when necessary. The case is then resolved under the applicable DOJ-National Prosecution Service rules, including the rules on preliminary investigations updated in 2024. (Department of Justice)

3. Filing of the Information in the Regional Trial Court

If the prosecutor finds sufficient basis to prosecute, an Information is filed in the RTC. The judge independently evaluates probable cause and determines whether a warrant of arrest or another appropriate process should issue.

The accused is arraigned, pretrial is conducted, and the prosecution and defense present evidence. Digital evidence may require authentication, forensic testimony, records from platforms, or testimony from people who personally saw the recording or online post.

4. Judgment and civil damages

A conviction may include imprisonment, a fine, and civil liability.

In XXX261049 v. People, the Supreme Court affirmed imprisonment and a ₱300,000 fine for each proven count. It also awarded each victim ₱15,000 in moral damages and ₱15,000 in exemplary damages based on the circumstances of that case. Damage awards are case-specific and can differ depending on the evidence and harm suffered. (Supreme Court E-Library)

The civil action for damages arising directly from the offense is generally deemed included in the criminal case unless it is waived, reserved, or filed separately under the Rules of Criminal Procedure. (Lawphil)

Is Barangay Conciliation Required?

An RA 9995 complaint does not ordinarily require barangay conciliation before it can be filed with police, the NBI, or the prosecutor.

Under Section 408 of the Local Government Code, offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000 are outside the lupon’s authority. RA 9995 carries imprisonment of up to seven years and a fine of up to ₱500,000. (Lawphil)

A barangay blotter can still help document an incident, particularly where there are threats or safety concerns, but a barangay certificate to file action is generally not a legal prerequisite for the RA 9995 criminal complaint.

Evidence and Documents to Prepare

Item	Why it matters
Government-issued ID	Confirms the complainant’s identity
Detailed incident timeline	Helps investigators understand the sequence of events
Original phone, computer, or storage device	May contain metadata, messages, files, and account information
Full screenshots and screen recordings	Identify the account, URL, date, time, and surrounding context
Original messages and emails	Show threats, admissions, demands, or distribution
Exact URLs and usernames	Allow investigators and platforms to locate the content
Witness affidavits	Support discovery, identification, publication, or emotional harm
Platform report confirmations	Show when removal was requested and what action was taken
Medical or psychological records	May support proof of emotional or psychological injury
Proof of expenses or financial loss	May support claims for actual damages
Relationship records where relevant	May establish coverage under RA 9262
Birth certificate or proof of age	Critical when the victim was a minor

For adult intimate material, place files in encrypted or access-controlled storage. Do not attach the full intimate recording to ordinary email unless an investigator or prosecutor provides a secure submission method.

Practical Timelines and Common Delays

There is no single nationwide completion period. The following are practical estimates rather than statutory deadlines:

Stage	Common practical range
Platform acknowledgement or removal	Hours to several weeks
Initial police or NBI intake	Often completed on the reporting date
Device examination or forensic extraction	Several weeks to several months
Preliminary investigation	Several months, sometimes longer
Platform or foreign service-provider records	Several months or more
RTC proceedings	Commonly more than one year, depending on evidence, motions, and court schedules

Common causes of delay include:

Unknown or fake accounts;
Deleted messages or reset devices;
Failure to preserve URLs and timestamps;
Overseas platforms and service providers;
Multiple respondents;
Difficulty serving subpoenas;
Contested ownership of accounts or devices;
Backlogs in forensic examination;
Motions for reconsideration or petitions for review; and
Changes in the complainant’s address or contact details.

Reporting to police, the NBI, or the prosecutor does not normally require payment of a court docket fee. However, incidental expenses may include notarization, printing, certified copies, transportation, device extraction, translations, psychological reports, or private legal representation.

Filing a Data Privacy Complaint

A victim may separately bring a complaint before the National Privacy Commission when intimate images or related personal information were unlawfully processed, disclosed, or shared.

The NPC currently requires its prescribed complaint-affidavit or formal complaint, supporting evidence, and notarization. The Commission announced a new complaint-affidavit template effective July 1, 2025. Submissions may be made through the methods authorized by the NPC, including personal filing, courier, or official electronic channels. Review the current NPC complaint procedure and forms. (National Privacy Commission)

An NPC complaint is not automatically a substitute for an RA 9995 criminal complaint. The two proceedings address different legal issues and may proceed separately when their respective requirements are met.

Special Considerations for Foreigners and Overseas Filipinos

RA 9995 protects a victim regardless of citizenship. A foreign national recorded or exposed in the Philippines may file a complaint under the same law.

For a complainant who is abroad:

Preserve original files and Philippine local times, together with the time zone shown on the device;
Identify where the recording, upload, receipt, or discovery occurred;
Coordinate with the Philippine investigating office regarding remote statements or personal appearance;
Execute affidavits before a Philippine embassy or consulate when accepted; or
Use local notarization and an apostille when appropriate for documents executed in an Apostille Convention country.

Documents in a foreign language may require a certified English or Filipino translation. Investigators may still require the complainant to appear personally for identification, clarification, forensic examination, or testimony.

If the accused is abroad, obtaining account records, locating the accused, securing evidence, and enforcing Philippine process may take longer. If the convicted offender is an alien in the Philippines, RA 9995 expressly provides for deportation proceedings after the sentence is served and the fine is paid.

Common Real-Life Scenarios

An ex-partner posts a consensually recorded video

The original consent to record does not authorize publication. Posting or forwarding without the required consent may violate RA 9995, the Safe Spaces Act, the Data Privacy Act, and possibly RA 9262 when the victim is a woman and the offender is a qualifying intimate partner.

A recipient forwards the video but did not record it

The recipient may still face liability for copying, distributing, or publishing the material. “I only forwarded it” is not necessarily a defense.

Someone secretly records inside a fitting room

A fitting room normally creates a strong expectation of privacy. If the recording captures a private area, Section 4(a) may apply even if the fitting room is inside a public shopping mall.

A hidden camera is discovered in a hotel or rental property

Photograph the device where it was found before moving it, if safe. Notify law enforcement promptly. Avoid dismantling, resetting, or examining the device in a way that may alter stored data or fingerprints.

The offender threatens to post but has not uploaded anything

A threat alone may not complete the publication offense under RA 9995, but it can support complaints under the Safe Spaces Act, RA 9262, grave threats, coercion, unjust vexation, extortion-related laws, or other applicable provisions. Preserve the complete conversation and do not pay without first documenting and reporting the demand.

The image was shared only in a private group chat

“Private” distribution is still distribution. The law does not require a post to be visible to the entire public. Sending it to even a limited group can cause criminal liability when the statutory requirements are present.

Frequently Asked Questions

Can I file a case if I agreed to make the intimate video?

Yes. Consent to make the video is different from consent to copy, distribute, sell, show, or publish it. Unauthorized sharing can violate RA 9995 even when the original recording was consensual.

Is revenge porn illegal in the Philippines?

Yes. Although RA 9995 uses the term “photo or video voyeurism,” it covers conduct commonly called revenge porn or non-consensual intimate image sharing.

Are screenshots enough to file a complaint?

Screenshots can support a complaint, but stronger evidence includes the original device, full conversation, URLs, account information, witnesses, metadata, platform confirmations, and properly authenticated electronic records. Do not rely only on a cropped screenshot if more complete evidence is available.

Do I need to go to the barangay first?

Generally, no. RA 9995 carries penalties beyond the barangay conciliation limit. A complaint may ordinarily be reported directly to the police, NBI, or prosecutor.

Can I demand that the offender delete the files?

You may request deletion, but deletion alone does not guarantee that copies no longer exist. It can also destroy evidence. Preserve proof and coordinate with investigators before allowing devices or accounts to be wiped.

Can I still file a case after the post has been removed?

Yes. Removal does not erase the completed recording, copying, distribution, or publication. Preserve screenshots, URLs, witness information, report confirmations, and original messages.

Does RA 9995 protect men and LGBTQ+ victims?

Yes. The law protects any person. Some wording, such as the statutory definition of the female breast, is sex-specific, but protection against recordings of sexual acts, genitals, pubic areas, and buttocks applies broadly.

Can each upload or victim result in a separate charge?

Potentially. Separate recordings, victims, uploads, or prohibited acts may support separate counts depending on the evidence and how the prosecutor frames the Informations. In XXX261049 v. People, the accused faced separate cases for separate victims.

How long do I have to file an RA 9995 complaint?

RA 9995 does not specify its own prescriptive period. Under Act No. 3326, an offense under a special law punishable by imprisonment of six years or more generally prescribes after 12 years. The period may begin from commission or, when the violation was initially unknown, from discovery. Proceedings against the offender can interrupt prescription. Repeated uploads and separate acts may involve different dates, so delay should be avoided. (Lawphil)

Can I recover damages for humiliation and emotional suffering?

Yes. Moral, exemplary, actual, and other damages may be recoverable when supported by law and evidence. Article 26 of the Civil Code specifically protects dignity, personality, privacy, and peace of mind. The criminal case may also include civil liability arising from the offense.

Key Takeaways

RA 9995 prohibits secret intimate recording and the unauthorized copying, distribution, sale, publication, broadcast, or exhibition of covered material.
Consent to record does not automatically mean consent to share. Distribution generally requires separate authorization.
A spouse, partner, recipient, group-chat member, website operator, or other downstream distributor may face liability.
The basic penalty is three to seven years’ imprisonment, a ₱100,000 to ₱500,000 fine, or both.
Cybercrime, Safe Spaces Act, Anti-VAWC, Data Privacy Act, child-protection, and Civil Code remedies may also apply.
Preserve full screenshots, URLs, original devices, messages, timestamps, and witness information before requesting removal.
Do not forward intimate material unnecessarily or access another person’s device or account without authority.
An RA 9995 complaint generally does not require barangay conciliation and ordinarily proceeds through preliminary investigation before prosecution in the Regional Trial Court.
Platform takedown, criminal investigation, data privacy proceedings, protection orders, and civil damages are separate remedies that may address different parts of the harm.