Quick answer

File a sworn, notarized complaint-affidavit with either:

the Complaint and Investigation Detection Section of the PNP Supervisory Office for Security and Investigation Agencies (SOSIA), Civil Security Group; or
the appropriate Regional Civil Security Unit (RCSU).

You may generally choose the RCSU covering the place where the incident happened, where you live or work, or where the security agency’s principal office is located. Attach witness affidavits and supporting evidence, plus a sworn certification against forum shopping. The complaint should identify the agency and the individual guard or officer involved, describe the specific acts or omissions, and state when and where they happened. (Scribd)

A PNP-SOSIA complaint is the main route for licensing and regulatory violations under Republic Act No. 11917 and its implementing rules. It does not replace:

a police or prosecutor complaint for a possible crime;
a DOLE or NLRC case for wages, benefits, dismissal, or other employment claims;
a National Privacy Commission complaint for misuse of personal data; or
a civil action seeking payment, damages, or an injunction.

Depending on what happened, you may need to use more than one route.

Start by identifying the correct complaint route

File with PNP-SOSIA or the RCSU for regulatory violations

Republic Act No. 11917, or the Private Security Services Industry Act, governs private security professionals, private security agencies, company guard forces, government security forces, and private security training agencies. The law places the industry under PNP regulation and authorizes administrative sanctions without preventing separate criminal or civil proceedings. (Lawphil)

A PNP administrative complaint may be appropriate when the facts involve matters such as:

deployment of an unlicensed security guard;
operation by an agency without a valid license;
an illegal search ordered by the agency;
abuse or conduct beyond a guard’s lawful authority;
threats, intimidation, coercion, or use of guards as a show of force;
improper issuance, possession, or use of a firearm;
falsified licences, reports, or regulatory documents;
unlawful or unsafe deployment practices;
minimum-wage violations involving security personnel;
refusal to comply with a final and executory NLRC decision; or
another violation of Republic Act No. 11917, its IRR, or a relevant PNP issuance. (Scribd)

The administrative proceeding primarily determines regulatory responsibility and possible consequences affecting licences, authority to operate, fines, suspension, cancellation, or revocation. It is not ordinarily the proceeding used to convict someone of a crime or award a victim complete civil damages. (Scribd)

Report possible crimes separately

Go to the police promptly when the incident may involve assault, physical injuries, grave threats, coercion, theft, robbery, unlawful restraint, firearm offences, sexual violence, property damage, or another crime.

For immediate danger, an ongoing attack, a firearm incident, or someone needing urgent medical help, call Unified 911. The nationwide Unified 911 system connects callers with police, fire, medical, and rescue services. (DILG)

A police blotter is useful documentation, but it is not necessarily the same as filing the complaint-affidavit or other papers required for prosecution. Ask the investigator or prosecutor what documents and witnesses are required for the suspected offence. Criminal prescriptive periods and procedures depend on the particular offence, so do not assume that a PNP-SOSIA complaint stops or extends the deadline for a criminal case.

Use DOLE or the NLRC for employment claims

A security guard or other agency employee seeking unpaid wages, overtime pay, holiday pay, service incentive leave, 13th-month pay, benefits, reinstatement, separation pay, or relief from illegal dismissal should ordinarily pursue the appropriate labor process.

A Request for Assistance may be submitted through the Single Entry Approach (SEnA) at DOLE regional, provincial, or field offices, NCMB offices, or NLRC offices, or online through DOLE ARMS. The current SEnA rules provide a 30-day mandatory conciliation-mediation process for labor and employment issues. (DOLE ARMS)

Money claims arising from an employer-employee relationship generally must be filed within three years from accrual. Other labor claims can have different prescriptive periods, so employees should not wait for a PNP administrative complaint to finish before seeking labor advice. (Lawphil)

A wage violation may also expose the security agency to PNP regulatory action, but the labor forum is normally the route for recovering the employee’s unpaid compensation or obtaining employment remedies. The two proceedings serve different purposes. (Scribd)

File with the National Privacy Commission for personal-data misuse

Consider an NPC complaint when the agency or its personnel improperly collected, used, disclosed, retained, or shared personal information—for example:

copies of IDs or visitor records;
CCTV recordings;
photographs or videos;
contact details;
employee records;
incident reports containing sensitive information; or
information posted or circulated without a lawful basis.

The NPC requires its formal complaint form to be completed, notarized, and submitted personally, by courier, or through its authorized complaint email channel. Privacy complaints have their own procedural and timeliness requirements, so consult the current NPC rules immediately rather than waiting for another case to conclude. (National Privacy Commission)

Consider a civil case when you seek payment or damages

A civil claim may be necessary for medical expenses, damaged or lost property, lost income, contractual losses, or other compensable harm. Liability can depend on the guard’s acts, the agency’s instructions and supervision, the service contract, the client establishment’s conduct, and the available proof.

The small-claims procedure covers qualifying money claims of up to ₱1,000,000, exclusive of interest and costs, but only claims within the categories listed in the Rules on Expedited Procedures—such as certain obligations under a contract of service, lease, loan, or sale of personal property. An injury or other tort claim does not automatically qualify merely because the amount is below ₱1,000,000. (Supreme Court of the Philippines)

Who should be named in the complaint?

Identify every respondent whose conduct is supported by facts and evidence. This may include:

the private security agency;
the individual security guard;
the detachment commander, supervisor, operations officer, or agency officer who allegedly gave an order or approved the conduct;
a company guard force, when the guards are directly maintained by the establishment; and
another regulated person or entity involved in the violation.

Do not name people merely because they hold senior positions. State what each respondent personally did, ordered, knew, failed to do, or attempted to conceal.

When the incident occurred at a mall, condominium, subdivision, office, hospital, school, bank, warehouse, or other client establishment, send the establishment a separate written notice. Ask it to preserve CCTV footage, access logs, duty rosters, incident reports, radio logs, visitor records, and communications. Whether the client establishment is legally liable is a separate, fact-dependent question; hiring a security agency does not by itself resolve liability in every case.

Step 1: Preserve evidence immediately

Do this before memories fade, CCTV is overwritten, personnel are reassigned, or records become difficult to obtain.

Preserve the following, where available:

the agency’s complete name and office address;
the guard’s name, ID number, licence details, uniform markings, assigned post, and physical description;
the exact date, approximate time, and location;
a chronological account written while the incident is fresh;
original photographs, videos, audio files, messages, emails, and social-media posts;
names and contact details of witnesses;
medical records, medical certificates, prescriptions, receipts, and photographs of injuries;
a police blotter, incident report, barangay record, or emergency-response record;
receipts, repair quotations, inventories, serial numbers, and proof of ownership for damaged or missing property;
written demands, agency replies, apologies, denials, or settlement offers;
contracts, duty detail orders, post orders, logbooks, and client instructions, if accessible;
for employment cases, time records, schedules, payslips, payroll messages, bank records, employment contracts, and contribution records; and
proof that you asked the agency or establishment to preserve CCTV and other records.

Keep the original files. Do not edit or overwrite them. Export complete message threads rather than preserving only selected screenshots. Record who took each photograph or video and when it was obtained. Store backup copies in a secure location.

Do not trespass, impersonate an officer, unlawfully access a device or account, or obtain evidence through threats. Evidence obtained improperly can create new legal problems.

Step 2: Send a preservation request and written demand

A demand letter is not always a prerequisite to a PNP administrative complaint, but it can clarify the dispute and help preserve evidence.

Send a dated written notice to the agency and, where relevant, its client. It should:

identify the incident;
state the records that must be preserved;
request the agency’s incident report and the identities of the assigned personnel;
state the corrective action or response sought;
give a reasonable response date, unless the matter is urgent; and
say that the request is made without waiving available administrative, criminal, labor, privacy, or civil remedies.

Use a delivery method that produces proof, such as personal delivery with a stamped receiving copy, registered mail, or a reputable courier. An email may provide additional notice, but do not assume that an email alone constitutes formal filing with PNP-SOSIA.

Step 3: Prepare the complaint-affidavit

The complaint must be written clearly, simply, and concisely and sworn before a notary public. It should give the respondent enough detail to understand and answer the charge. (Scribd)

Include:

Your information

State your:

complete name;
address;
contact number; and
current security agency, when relevant because you are a security professional or employee.

Each respondent’s information

Provide, as far as known:

complete name;
address and contact details;
security agency;
job title, position, assigned post, or office; and
relevant licence or ID details.

Do not abandon a valid complaint merely because you do not know every detail. Clearly state which information is unknown and attach evidence that can help identify the person, such as a photograph, duty post, incident report, or description.

A chronological statement of facts

State:

what happened before, during, and after the incident;
the specific act or omission of each respondent;
the place, date, and time;
what was said or done;
whether a weapon, restraint, search, threat, or physical force was involved;
the injury, loss, or other consequence;
the names of witnesses;
what you reported to the agency or establishment; and
how the agency responded.

Separate facts you personally saw or heard from information given to you by someone else. Avoid insults, exaggeration, assumptions about motive, and legal conclusions unsupported by facts.

The violations and relief requested

You may state that the conduct appears to violate Republic Act No. 11917, its IRR, or relevant PNP rules. Describe the action you are requesting, such as:

investigation of the guard and agency;
verification of their licences and deployment authority;
inspection of agency records;
appropriate administrative sanctions;
preservation and production of relevant records; or
referral to the proper authority if part of the case is outside SOSIA’s jurisdiction.

The PNP evaluator will determine the proper administrative classification. An incorrect section number should not replace a clear and complete account of what actually happened.

Step 4: Attach the required supporting documents

The IRR requires the complaint to be accompanied by:

your notarized complaint-affidavit;
affidavits of witnesses, when available;
documentary, photographic, electronic, medical, or other supporting evidence; and
a notarized certification against forum shopping. (Scribd)

For a company, corporation, cooperative, association, government office, or other juridical entity, attach proof that the person filing is authorized. Depending on the entity, this may be a special power of attorney, board resolution, or secretary’s certificate. An individual private citizen ordinarily files personally. (Scribd)

Number the annexes—for example, “Annex A,” “Annex B,” and so on—and refer to each annex in the affidavit. Include an index when there are many documents.

Step 5: Complete the certification against forum shopping

The certification should disclose whether a complaint involving the same cause of action has been filed, is pending, or has been terminated before another SOSIA or RCSU office. It must also undertake to report a later-discovered similar filing within five working days from learning about it. (Scribd)

This requirement does not mean that you must conceal a police report, labor case, privacy complaint, or civil case. Those proceedings may involve different legal rights and remedies. Disclose related proceedings accurately and explain their nature rather than risking a misleading certification.

When the certification is initially missing, the IRR allows the complainant to submit it within seven working days from notice. Failure to comply may result in dismissal. It is safer to include it with the original filing. (Scribd)

Step 6: File with SOSIA or the proper RCSU

The complaint may be filed with the Complaint and Investigation Detection Section of PNP-SOSIA or with an RCSU. For an RCSU filing, the IRR permits the complainant to choose the unit covering:

the place where the act or omission occurred;
the place where the complainant works;
the place where the complainant resides; or
the location of the respondent agency’s principal office. (Scribd)

Pleadings may be presented in their original form to the regulatory office or sent by registered mail or private courier, with proof that the other party was furnished a copy when required. For mailed or couriered pleadings, the IRR treats the actual date and time stamped upon receipt as significant and requires the envelope to form part of the record. (Scribd)

Because office locations, unit designations, receiving hours, and administrative channels can change, confirm the current receiving office directly through official PNP or SOSIA channels before travelling or sending original papers.

When filing personally:

bring the original and enough complete copies for receiving and service;
ask the receiving officer to stamp your copy with the date and time;
obtain the reference or docket number;
record the name and unit of the receiving officer; and
ask how notices will be served and where status inquiries should be directed.

Do not surrender your only copy of irreplaceable evidence. Submit authenticated or properly marked copies where permitted and keep the originals ready for examination.

What happens after filing?

Initial evaluation

The evaluator examines:

whether SOSIA or the RCSU has jurisdiction;
whether the complainant has legal standing; and
whether the complaint is sufficient in form and substance.

If the matter is outside SOSIA’s jurisdiction, the evaluator is directed to refer it to the proper office within five working days after approval. If your authority to file or the complaint’s form is deficient, you should be informed so the defect can be corrected. (Scribd)

Investigative inspection

When the complaint is sufficient, SOSIA or its authorized representative may order an investigative inspection. The inspection team is required to submit an after-inspection report within seven working days after the inspection. (Scribd)

Counter-affidavit and probable-cause evaluation

The respondent is ordinarily given seven working days to submit a counter-affidavit after receiving the complaint and supporting materials. The evaluator then determines whether probable cause exists to justify a formal charge. (Scribd)

“Probable cause” at this administrative stage is not a criminal conviction. It means that the case may proceed to formal administrative adjudication.

Summary hearing

If a formal charge is pursued, the summary hearing officer issues summons and directs the respondent to answer. Affidavits and documentary evidence play a substantial role because the process is summary rather than a full court trial. A pre-hearing conference may be used to define the issues, identify admissions, and mark exhibits. (Scribd)

Attend every required appearance, keep contact details current, and immediately notify the office in writing about any change of address.

Decision, reconsideration, and appeal

A party adversely affected by the decision may file one motion for reconsideration within 10 working days from receipt, based on newly discovered evidence, prejudicial legal error or irregularity, or lack of evidentiary support. A timely motion stays execution of the questioned decision. (Scribd)

An appeal is perfected by filing and serving a notice of appeal upon the Director of the Civil Security Group within 10 working days from receipt of the decision, with a copy furnished to the other party. The memorandum of appeal must be submitted with the notice or no later than 15 working days after filing the notice, subject to the detailed requirements in the IRR. (Scribd)

These periods are short. Note the exact date you received every decision, order, envelope, email, or courier package.

Important PNP-SOSIA deadlines

Step	Period
Complete a missing certification against forum shopping	Within 7 working days from notice
Report a later-discovered duplicate SOSIA/RCSU filing	Within 5 working days from knowledge
Move for reinvestigation after receiving a recommendation to close or drop the complaint	Within 5 days from receipt
File a motion for reconsideration of the decision	Within 10 working days from receipt
File and serve a notice of appeal	Within 10 working days from receipt of the decision
Submit the memorandum of appeal	With the notice, or within 15 working days from filing it

The IRR’s complaint provisions do not establish one blanket filing period for every type of SOSIA administrative complaint. That does not make delay safe. Evidence may disappear, and related labor, criminal, privacy, or civil claims have their own prescriptive periods and procedural deadlines. (Scribd)

Serious incidents that may trigger investigation without a private complaint

SOSIA or the RCSU with jurisdiction may initiate an investigation on its own in cases involving:

illegal discharge of a firearm by a private security professional;
death or serious physical injury;
human-rights violations or another serious incident requiring immediate action;
loss or theft of an agency-issued firearm;
an illegal posting involving an imminent threat or stand-off;
a competent court order; or
another justified order from the authorized PNP leadership. (Scribd)

Even in these cases, victims and witnesses should preserve evidence and submit a written account. Do not assume that an incident automatically generated a complete administrative, criminal, or civil case.

Industry disputes and security associations

The IRR contemplates arbitration or mediation through recognized security associations for certain disputes between agencies and security professionals. This does not displace courts, labor bodies, or other agencies that independently have jurisdiction over the controversy. Obtain the association’s written result when conciliation or settlement is attempted, because it may be relevant to a later filing. (Scribd)

A worker should not sign a quitclaim, waiver, settlement, resignation, or affidavit of desistance without understanding its legal effect and confirming that the amount and terms are accurate.

Common mistakes that weaken complaints

Filing only a general accusation

Statements such as “the guards harassed me” or “the agency is abusive” are usually insufficient by themselves. Identify the words, actions, people, dates, location, and resulting harm.

Complaining only to the client establishment

A complaint to mall management, a condominium administrator, an employer, or a homeowners’ association creates a useful record, but it does not necessarily commence a PNP regulatory case.

Filing only against the guard when agency conduct is involved

Identify evidence of agency responsibility, such as deployment of an unlicensed person, an unlawful post order, improper firearm issuance, instructions to intimidate someone, inadequate supervision, falsified records, or an attempted cover-up.

Assuming the agency is automatically liable for everything

Administrative, criminal, labor, and civil responsibility follow different rules. Explain the agency’s own acts, orders, omissions, employment relationship, supervision, or contractual role.

Submitting unorganized screenshots

Preserve complete conversations, dates, account identifiers, source files, and metadata. Explain who captured each screenshot and what it shows.

Missing the certification against forum shopping

Attach it from the beginning. When notified of a deficiency, observe the seven-working-day period.

Waiting for the internal investigation to finish

An agency’s internal inquiry does not necessarily suspend government filing deadlines or prescriptive periods.

Asking SOSIA for relief another forum must grant

State the regulatory relief requested from SOSIA, while pursuing unpaid wages, criminal prosecution, damages, privacy remedies, or urgent protective measures in the proper forum.

Signing a settlement under pressure

Read every term. Confirm whether it covers only the internal complaint or also purports to waive labor, civil, criminal, privacy, or administrative claims. Seek independent advice before signing a broad release.

When legal help is urgent

Seek immediate assistance when:

someone has been killed or seriously injured;
a firearm was discharged, pointed, lost, or unlawfully carried;
you are being threatened, followed, intimidated, or pressured to withdraw;
CCTV or other crucial evidence may soon be erased;
a child, older person, person with disability, or other vulnerable individual is involved;
you were detained, searched, restrained, or forced to surrender property;
the agency asks you to sign an affidavit, waiver, quitclaim, or settlement;
you received a summons, formal charge, dismissal report, decision, or appealable order;
a labor, criminal, privacy, or civil deadline may be approaching; or
the respondent is using influence or threats against you or your witnesses.

For justice-related complaints or requests for legal assistance, the Department of Justice Action Center receives concerns from walk-in and telephone clients. Eligibility for free representation by the Public Attorney’s Office depends on its governing requirements and the nature of the case. (Department of Justice)

If intimidation threatens the fairness or safety of the administrative investigation, the IRR allows a properly supported request to transfer venue in circumstances involving harassment, coercion, threats to life or limb, harm related to the case, or the interests of justice. (Scribd)

Frequently asked questions

Can I complain even if I do not know the guard’s full name?

Yes. Give all identifying information available: the agency, post, date, time, uniform markings, licence or ID number, photograph, description, duty location, and names of supervisors. Ask the establishment and agency to preserve the duty roster and CCTV footage.

Should I complain against the guard, the agency, or both?

Name each person or entity whose conduct is supported by facts. A guard may be responsible for a personal act, while the agency may face separate responsibility for deployment, instructions, supervision, licensing, firearms, records, or operational practices.

Must the complaint be notarized?

The PNP administrative complaint is required to be under oath before a notary public. Witness affidavits and the certification against forum shopping should also comply with the applicable oath and notarization requirements. (Scribd)

Can I file where I live instead of where the incident happened?

The IRR generally permits filing with the RCSU where the incident occurred, where you work or reside, or where the respondent’s principal office is located. (Scribd)

Can I send the complaint by email?

The cited IRR expressly recognizes personal filing, registered mail, and private courier for pleadings. Do not rely on ordinary email as the formal filing method unless the receiving office confirms in writing that an authorized electronic channel currently applies to your complaint. (Scribd)

Is a police blotter enough?

No. A blotter records the report but may not complete the requirements for a criminal complaint, prosecutor’s investigation, or PNP-SOSIA administrative case.

Can I ask SOSIA to order compensation for my injuries?

The SOSIA process primarily addresses regulatory and administrative responsibility. Compensation or damages may require a settlement, labor proceeding, small-claims case where legally applicable, or an ordinary civil action.

Can a worker file with both DOLE and SOSIA?

Potentially, yes. For example, unpaid wages may be pursued through the labor system, while the same conduct may have regulatory consequences under the private-security rules. Disclose related proceedings accurately and avoid seeking duplicate recovery for the same obligation.

Will filing against the guard automatically result in the agency losing its licence?

No. The result depends on the charge, evidence, prior violations, applicable rules, and due process. Possible outcomes range from dismissal to administrative fines or action affecting an individual or agency licence.

What if the agency offers to settle?

Request a written proposal. Confirm the amount, payment date, confidentiality provisions, admissions or denials, evidence-preservation obligations, and scope of any waiver. Do not sign under pressure.

What if my complaint is recommended for closure?

The IRR allows one motion for reinvestigation within five days from receipt of the report recommending closure or dropping of the complaint. Attach the missing evidence or explain the factual or legal error directly. (Scribd)

Official sources and filing resources

General-information disclaimer

This article provides general Philippine legal information, not advice for a particular case. The proper respondents, causes of action, evidence, venue, remedies, and deadlines depend on the incident, documents, employment relationship, injuries, and proceedings already filed. Confirm current forms, office locations, filing channels, fees, and requirements directly with the responsible government office before submitting documents.

Source check completed: July 23, 2026.