The rapid digital transformation of the Philippine financial sector has led to the proliferation of Online Lending Applications (OLAs). While these platforms provide quick access to credit, many engage in predatory practices, including "debt shaming," unauthorized access to private data, and the imposition of usurious interest rates. Under Philippine law, borrowers are not defenseless. There is a robust regulatory framework designed to curb these abuses.

1. Unfair Debt Collection Practices

The Securities and Exchange Commission (SEC), under Memorandum Circular No. 18, Series of 2019, expressly prohibits "Unfair Debt Collection Practices." Lending companies and their third-party collectors are barred from using any form of harassment or coercion.

Prohibited Acts:

Threats of Violence: Using or threatening to use physical force or other criminal means to harm the person, reputation, or property of the borrower.
Obscene/Profane Language: Using insults or foul language to intimidate the borrower.
Debt Shaming: Publicly disclosing the borrower's debt, including posting on social media or informing the borrower's contacts (contacts harvested from the phone's directory).
False Representation: Falsely claiming to be a lawyer, a court representative, or a police officer to scare the borrower into paying.
Contacting at Unreasonable Hours: Calling or visiting between 10:00 PM and 6:00 AM, unless the debt is more than 60 days past due or the borrower has given prior consent.

2. Violations of the Data Privacy Act (RA 10173)

Many OLAs require access to a borrower's contacts, gallery, and social media accounts as a condition for loan approval. The National Privacy Commission (NPC) has ruled that harvesting this information for the purpose of "contacting family and friends" to shame the borrower is a direct violation of the Data Privacy Act of 2012.

Legal Safeguards:

Proportionality Principle: Personal data collected must be relevant and not excessive for the purpose of the loan.
Unauthorized Processing: Accessing a phone's contact list to harass third parties is illegal.
Malicious Disclosure: Disclosing a borrower’s sensitive personal information with intent to cause harm or without consent is a criminal offense under RA 10173.

3. Caps on Interest Rates and Charges

For years, the Philippines had no ceiling on interest rates for non-bank loans. However, effective January 2022, the Bangko Sentral ng Pilipinas (BSP) issued Circular No. 1133, which provides specific caps on interest rates and other fees for short-term, small-value, unsecured loans offered by lending and financing companies.

The Limits:

Nominal Interest Rate: Capped at 6% per month (approximately 0.2% per day).
Effective Interest Rate (EIR): Includes the nominal rate plus all other fees (processing fees, service fees, etc.). This is capped at 15% per month.
Late Payment Penalties: Capped at 1% per month of the outstanding amount.

Note: Any amount collected in excess of these caps is considered legally non-binding, and the borrower may seek a refund or have the excess applied to the principal.

4. Specific Legal Remedies and Steps for Borrowers

If you are a victim of OLA harassment or excessive interest, you can take the following administrative and criminal actions:

A. Filing a Complaint with the SEC

The SEC’s Corporate Governance and Finance Department (CGFD) oversees lending companies. You can file a formal complaint if the OLA is engaging in unfair debt collection or is not registered.

Requirement: Check the SEC website for the "List of Recorded Lending/Financing Companies." If they are not on the list, they are operating illegally.

B. Filing a Complaint with the NPC

If the OLA accessed your contacts or posted your information online, file a "Complaints Assistance" form with the National Privacy Commission. The NPC has the power to order the shutdown of apps found violating privacy laws.

C. Criminal Charges under the Cybercrime Prevention Act (RA 10175)

Harassment via digital means can fall under Cyber Libel or Unjust Vexation. You may seek assistance from:

PNP Anti-Cybercrime Group (ACG)
NBI Cybercrime Division

D. The "Cease and Desist" Defense

Borrowers can formally notify the lending company in writing (via email or registered mail) that they are invoking their rights under SEC MC No. 18 and BSP Circular 1133, demanding that the company stop the harassment and recalculate the loan based on legal interest caps.

5. Summary Table of Protections

Issue	Governing Law/Regulation	Key Protection
Harassment	SEC MC No. 18 (2019)	Prohibits shaming, threats, and profanity.
Privacy Breach	RA 10173 (Data Privacy Act)	Prevents unauthorized access to contact lists.
High Interest	BSP Circular No. 1133	Caps total monthly interest/fees at 15%.
Cyber Harassment	RA 10175 (Cybercrime Act)	Penalizes online libel and intimidation.

Conclusion

While the obligation to pay a valid debt remains, it does not give lenders a license to violate human dignity or privacy. Borrowers subjected to "shaming" or usurious rates should document all communications (screenshots of texts, call logs, and loan contracts) as evidence for formal complaints. The law prioritizes the protection of consumers against predatory financial practices in the digital space.