In an era where digital footprints are permanent, the misuse of social media to harass or shame individuals has become a prevalent issue. In the Philippines, the legal system has evolved to address these "digital crimes" through a combination of traditional penal laws and modern legislation.

I. Governing Laws

Several key statutes protect individuals from online abuse and the unauthorized sharing of personal media:

Cybercrime Prevention Act of 2012 (Republic Act No. 10175): This is the primary law covering Cyber Libel. It punishes the public and malicious imputation of a crime, vice, or defect, intended to cause dishonor or contempt, committed through a computer system.
Safe Spaces Act (Republic Act No. 11313): Also known as the Bawal Bastos Law, this act specifically penalizes gender-based online sexual harassment. This includes uploading or sharing photos/videos without consent, persistent uninvited comments, and cyberstalking.
Data Privacy Act of 2012 (Republic Act No. 10173): This applies when personal information (including photos that identify a person) is processed, uploaded, or shared without the subject’s consent or a legitimate purpose.
Anti-Photo and Video Voyeurism Act of 2009 (Republic Act No. 9995): This prohibits recording or distributing photos or videos of a person’s private parts or sexual acts without consent, even if the original recording was consensual.

II. Identifying the Offense

Before filing, you must determine which legal category the act falls under:

Online Harassment/Stalking: Persistent threats, unwanted messages, or public shaming (Safe Spaces Act).
Cyber Libel: If the post is false and damages your reputation (RA 10175).
Unauthorized Posting: If your private photos/videos are shared to humiliate you or violate your privacy (RA 9995 or RA 10173).

III. The Step-by-Step Filing Process

1. Evidence Preservation (The Most Critical Step)

Do not delete the offensive content immediately. You need proof:

Screenshots: Capture the post, the profile of the perpetrator, the date/time stamp, and the URL (link) of the post.
Digital Logs: If the harassment occurs via direct messages, save the entire conversation thread.
Certification: For stronger evidence, you may have the screenshots "notarized" or authenticated by a forensic specialist, though initial reports accept clear screenshots.

2. Report to Platform Moderators

Utilize the "Report" function on Facebook, X (Twitter), Instagram, or TikTok. While this may remove the content, it does not constitute a legal complaint.

3. File a Formal Complaint with Law Enforcement

You have two primary agencies to choose from:

PNP Anti-Cybercrime Group (PNP-ACG): Located at Camp Crame and various regional offices. They handle immediate investigations and digital tracking.
NBI Cybercrime Division (NBI-CCD): Located at the NBI Clearance Center or regional offices. They are highly specialized in tracing "anonymous" accounts.

Note: You will need to bring your gathered evidence and a valid ID. You will be asked to execute a Sworn Statement (Affidavit) detailing the incident.

4. Filing with the Department of Justice (DOJ)

If the identity of the perpetrator is known, you may file a complaint-affidavit directly with the Office of the City Prosecutor for a Preliminary Investigation. The prosecutor will determine if there is "probable cause" to bring the case to court.

IV. Remedies for Data Privacy Violations

If the issue is primarily about the unauthorized use of your image for commercial or identity-theft purposes, you can file a formal complaint with the National Privacy Commission (NPC) through their online "Complaints" portal.

V. Penalties

The Philippines takes these offenses seriously. Depending on the law invoked:

Cyber Libel: Prision mayor (6 years and 1 day to 12 years) or a fine.
Safe Spaces Act: Fines ranging from ₱100,000 to ₱500,000 and imprisonment.
Photo/Video Voyeurism: Imprisonment of 3 to 7 years and fines up to ₱500,000.

VI. Important Considerations

Prescription Period: For Cyber Libel, the Supreme Court has clarified that the period to file is 15 years from the date of discovery/publication, but it is always best to act immediately.
Anonymity: Even if the perpetrator uses a "troll" or "fake" account, the PNP and NBI have tools to request subscriber information from ISPs or platforms, though this process can be lengthy.