I. Introduction

In the Philippines, the tracing of an Internet Protocol address, commonly known as an IP address, sits at the intersection of cybersecurity, privacy, criminal procedure, data protection, telecommunications regulation, and constitutional rights. IP address tracing may be used for legitimate purposes, such as investigating cybercrime, detecting fraud, preventing unauthorized access, securing networks, enforcing website rules, or responding to online harassment. At the same time, it may also raise serious legal issues when done without authority, transparency, lawful basis, or proper safeguards.

The central legal question is not simply whether IP address tracing is allowed. The better question is: who is doing the tracing, for what purpose, by what method, using what data, and with what legal authority?

Under Philippine law, tracing an IP address may be lawful when done for a legitimate purpose and in compliance with privacy, cybercrime, evidence, and due process requirements. It may become unlawful when it involves unauthorized access, illegal interception, improper disclosure of personal information, harassment, doxxing, surveillance without lawful basis, or collection and processing of personal data in violation of the Data Privacy Act of 2012.

II. What Is an IP Address?

An IP address is a numerical identifier assigned to a device or network when it connects to the internet. It allows computers, servers, routers, and websites to communicate with each other. IP addresses may be static or dynamic. A static IP address remains generally constant, while a dynamic IP address may change periodically depending on the internet service provider’s system.

An IP address does not always identify a person by itself. It may identify a network, household, company, mobile carrier gateway, internet café, public Wi-Fi hotspot, or virtual private network endpoint. A single IP address may be used by many users, and one person may use many IP addresses across different devices or locations.

However, an IP address can become personally identifying when combined with other information, such as subscriber records, timestamps, login records, device identifiers, geolocation information, account details, payment records, or telecommunications data. For this reason, IP addresses are highly relevant under privacy and cybercrime laws.

III. Is IP Address Tracing Legal in the Philippines?

IP address tracing is not automatically illegal in the Philippines. It may be legal when done through lawful means and for a legitimate purpose. For example, a website owner may log visitor IP addresses for security, fraud prevention, analytics, abuse detection, or system administration. An employer may monitor corporate network logs under a lawful and proportionate workplace policy. A cybersecurity professional may investigate suspicious traffic within systems they are authorized to administer. Law enforcement may seek information from service providers in connection with a lawful investigation.

However, IP tracing may become illegal when it involves unlawful techniques or improper use of the resulting information. Examples include hacking into an account or server to obtain logs, intercepting communications without authority, using spyware, phishing for credentials, threatening or harassing a person based on an IP address, publishing someone’s location or identity without lawful basis, or obtaining subscriber information from an internet service provider through deception or unauthorized access.

The legality therefore depends on the method, purpose, authority, and compliance with applicable law.

IV. Applicable Philippine Laws

Several Philippine laws govern IP tracing, cyber investigations, and privacy rights.

A. The 1987 Philippine Constitution

The Constitution protects the right to privacy, the privacy of communication and correspondence, and the right against unreasonable searches and seizures. These protections are important in cyber investigations because digital data can reveal private information about a person’s identity, location, behavior, communications, associations, and activities.

Government access to private data generally requires lawful authority. Where the data sought intrudes upon a reasonable expectation of privacy, law enforcement must comply with constitutional standards, statutory procedures, and judicial safeguards.

B. Republic Act No. 10173, or the Data Privacy Act of 2012

The Data Privacy Act is the principal law governing the processing of personal information in the Philippines. It applies to the collection, recording, organization, storage, updating, use, sharing, disclosure, or disposal of personal information by personal information controllers and processors.

An IP address may be treated as personal information when it can reasonably identify an individual, either directly or indirectly. This is especially true when the IP address is combined with timestamps, subscriber data, user account information, device information, location data, or other identifiers.

Under the Data Privacy Act, the processing of IP addresses and related logs must comply with the general data privacy principles of transparency, legitimate purpose, and proportionality.

Transparency means that the data subject should generally be informed about the nature, purpose, and extent of processing. This is commonly done through privacy notices, terms of use, cookie notices, workplace policies, or cybersecurity policies.

Legitimate purpose means that the collection and use of IP address data must be compatible with a lawful and declared purpose. Examples may include network security, fraud prevention, account protection, legal compliance, incident response, or enforcement of rights.

Proportionality means that the data collected should be adequate, relevant, suitable, necessary, and not excessive in relation to the purpose. Collecting IP addresses for security logging may be proportionate; collecting excessive location or device data without justification may not be.

The Data Privacy Act also gives data subjects rights, including the right to be informed, right to object, right of access, right to rectification, right to erasure or blocking, right to damages, and right to data portability, subject to lawful limitations.

C. Republic Act No. 10175, or the Cybercrime Prevention Act of 2012

The Cybercrime Prevention Act criminalizes various cyber-related offenses, including illegal access, illegal interception, data interference, system interference, misuse of devices, cybersquatting, computer-related forgery, computer-related fraud, computer-related identity theft, cybersex, child pornography-related offenses, unsolicited commercial communications in certain contexts, and online libel.

In the context of IP tracing, the Cybercrime Prevention Act is relevant in two ways.

First, IP address tracing may be part of a lawful cybercrime investigation. Law enforcement authorities may use logs, IP addresses, timestamps, subscriber data, and other digital evidence to identify suspects or trace the origin of unlawful online activity.

Second, unlawful methods used to trace an IP address may themselves constitute cybercrime. For example, hacking into a system to obtain IP logs may constitute illegal access. Secretly capturing communications without authority may constitute illegal interception. Deploying malware to reveal a user’s IP address may involve misuse of devices, illegal access, data interference, or other offenses depending on the facts.

D. Rules on Cybercrime Warrants and Digital Evidence

Philippine cybercrime investigations involving traffic data, subscriber information, stored computer data, or computer systems may require compliance with applicable procedural rules. Courts may issue cybercrime warrants for matters such as disclosure of computer data, interception of computer data, search and seizure of computer data, and examination of computer data, depending on the nature of the investigation and the relief sought.

In general, law enforcement cannot simply demand private subscriber information from an internet service provider without lawful basis. Proper legal process is usually required, especially where the information sought links an IP address to a subscriber, account, device, or person.

Digital evidence must also be collected, preserved, authenticated, and presented properly. Logs should include relevant timestamps, time zone references, source and destination IP addresses, ports where applicable, headers where relevant, and chain-of-custody documentation.

E. E-Commerce Act and Electronic Evidence

Republic Act No. 8792, or the Electronic Commerce Act, recognizes electronic documents, electronic data messages, and electronic signatures. In court proceedings, digital records such as logs, screenshots, metadata, email headers, server records, and IP address information may be relevant, but their admissibility depends on proper authentication and compliance with rules on electronic evidence.

A mere screenshot claiming to show an IP address may be weak evidence if it lacks authentication, context, source logs, timestamps, or proof of integrity. Stronger evidence usually requires original logs, system-generated records, competent testimony, preservation of metadata, and proper chain of custody.

F. Civil Code, Criminal Laws, and Special Laws

Improper use of IP address information may also give rise to liability under other laws. Depending on the facts, conduct may involve invasion of privacy, harassment, threats, unjust vexation, grave coercion, defamation, identity theft, stalking-like behavior, or other civil or criminal claims. Philippine law does not treat all privacy violations under a single statute; liability may arise from a combination of constitutional rights, statutes, civil law principles, criminal provisions, and administrative rules.

V. Is an IP Address Personal Information?

An IP address can be personal information when it can identify an individual directly or indirectly. Standing alone, an IP address may identify only a network or device connection. But when paired with other information, it may identify a subscriber, user, location, account, workplace, household, or device.

Examples of data that can make an IP address personally identifying include:

Internet service provider subscriber records;
Account login records;
Email headers;
Website access logs;
Device identifiers;
Mobile network data;
Geolocation information;
Payment or billing records;
Usernames or social media handles;
Timestamps and session records.

Because of this, organizations should treat IP addresses as potentially personal information and process them under the Data Privacy Act’s principles.

VI. Public IP Tracing vs. Subscriber Identification

A key distinction must be made between identifying a public IP address and identifying the actual person behind it.

Many websites, applications, email servers, and security tools can show the IP address used in a connection. This may indicate the internet service provider, approximate city, country, or network. However, such information usually does not conclusively identify a person.

To identify the subscriber assigned to a particular IP address at a specific date and time, one usually needs records from the internet service provider. Since many Philippine internet service providers use dynamic IP addresses or carrier-grade network address translation, timestamps and port information may be critical. Without accurate time and technical data, IP-based attribution may be unreliable.

Private individuals usually cannot compel an ISP to disclose subscriber information. Law enforcement, courts, or authorized government bodies may obtain such information only through lawful procedures.

VII. Lawful Uses of IP Address Tracing

IP address tracing may be lawful in many ordinary contexts.

A. Cybersecurity and Incident Response

Companies, schools, government offices, and website operators may log IP addresses to detect attacks, block malicious traffic, investigate unauthorized access, prevent fraud, identify compromised accounts, and preserve system integrity. This is generally legitimate when covered by appropriate policies and privacy notices and when the data collected is proportionate.

B. Website and Application Administration

Websites often collect IP addresses for server logs, analytics, rate limiting, spam prevention, abuse control, and account security. This may be lawful if disclosed properly and if the logs are retained only as long as necessary.

C. Fraud Prevention

Banks, fintech companies, e-commerce platforms, and payment processors may use IP addresses to detect suspicious transactions, account takeovers, unusual login locations, or automated abuse. This type of processing may be justified by legitimate interests, contractual necessity, legal obligations, or fraud prevention needs, depending on the circumstances.

D. Workplace Monitoring

Employers may monitor IP logs, device logs, access records, and network activity on company systems, but monitoring must be reasonable, transparent, proportionate, and tied to legitimate business purposes. Employees should be informed through workplace policies. Secret, excessive, or intrusive monitoring may create privacy issues.

E. Law Enforcement Investigations

Law enforcement may use IP tracing to investigate hacking, online scams, cyber libel, identity theft, child exploitation, illegal access, data breaches, and other cybercrimes. However, government action must comply with constitutional rights, statutory authority, warrant requirements where applicable, and procedural safeguards.

F. Litigation and Evidence Preservation

Parties in civil or criminal cases may preserve IP logs as evidence. A complainant may submit available logs, headers, screenshots, platform reports, and incident documentation to authorities. However, private parties should avoid illegal collection methods. Evidence obtained unlawfully may be challenged and may expose the collector to liability.

VIII. Potentially Unlawful Uses of IP Tracing

IP tracing may be unlawful or legally risky in several circumstances.

A. Hacking to Obtain IP Logs

Accessing another person’s account, router, server, database, or platform without permission to obtain IP information may constitute illegal access or other cybercrime.

B. Intercepting Communications

Capturing or intercepting communications without authority may violate cybercrime laws and constitutional privacy protections. This includes unauthorized packet sniffing, wiretapping-like activity, or capturing private communications on networks where the person has no authority to monitor.

C. Use of Malware, Spyware, or Deceptive Tracking Links

Using malicious software or deceptive links to force a person to reveal their IP address may create liability, especially if it involves unauthorized access, data collection without consent, fraud, phishing, or interference with a device or system.

D. Doxxing and Public Exposure

Publishing a person’s alleged IP address, location, name, workplace, home address, or other identifying information to shame, threaten, harass, or incite others may violate privacy laws, civil rights, criminal laws, platform rules, and data protection principles.

E. Harassment, Threats, or Coercion

Using IP information to intimidate someone, threaten exposure, demand money, force action, or silence speech may give rise to criminal or civil liability.

F. Unauthorized Disclosure by Employees or Insiders

Employees of internet service providers, telecommunications companies, platforms, banks, or companies with access to logs may not disclose subscriber information or IP logs without authorization. Unauthorized disclosure may violate the Data Privacy Act, employment obligations, confidentiality duties, and possibly criminal law.

IX. Can a Private Person Trace Someone’s IP Address?

A private person may see an IP address in limited situations, such as from email headers, server logs, website analytics, security logs, peer-to-peer connections, or platform administrative tools. Merely observing an IP address from systems one lawfully controls is not necessarily illegal.

However, a private person generally cannot lawfully compel an ISP to identify the subscriber behind an IP address without proper legal process. Nor may a private person hack, intercept, deceive, or install malware to obtain IP information.

A private person who is a victim of cybercrime should preserve evidence and report the matter to proper authorities rather than attempting intrusive self-help methods.

X. Can Police Trace an IP Address in the Philippines?

Law enforcement agencies may trace IP addresses in cybercrime investigations, but they must follow legal procedures. Depending on the nature of the data sought, authorities may need court orders, warrants, preservation requests, or cooperation with service providers and platforms.

For example, if investigators have a suspect’s IP address from a platform log, they may seek subscriber information from the ISP for the date and time of the incident. Accuracy depends heavily on correct timestamps, time zones, IP assignment records, and technical details. If the IP address is shared through carrier-grade NAT, additional port data may be necessary.

Law enforcement must also respect privacy rights, due process, and rules on digital evidence.

XI. Can Websites Collect IP Addresses Without Consent?

A website may collect IP addresses if it has a lawful basis and complies with the Data Privacy Act. Consent is one possible basis, but it is not the only one. Processing may also be justified by contract, legal obligation, legitimate interests, protection of lawful rights, or other grounds recognized under data privacy law.

However, the website should disclose the collection and use of IP addresses in a privacy notice or similar document. The collection must be limited to what is necessary, and the data should be protected against unauthorized access, misuse, or disclosure.

For example, collecting IP addresses for server security and fraud prevention may be reasonable. Collecting them secretly for unrelated profiling, selling, harassment, or undisclosed tracking may be legally problematic.

XII. IP Geolocation and Its Limits

IP geolocation estimates the physical location associated with an IP address. It may identify the country, region, city, or internet provider, but it is often inaccurate. It should not be treated as conclusive proof of a person’s exact location.

In the Philippines, IP geolocation may be especially imprecise because of mobile networks, shared addresses, VPNs, proxies, public Wi-Fi, enterprise networks, and ISP routing. An IP address may point to the location of a service provider, network hub, or gateway rather than the user’s actual location.

Because of these limitations, IP address evidence should be corroborated with other evidence before attributing conduct to a person.

XIII. VPNs, Proxies, Public Wi-Fi, and Shared Networks

Many users connect through VPNs, proxies, public Wi-Fi, offices, schools, internet cafés, or mobile carrier networks. These can make IP tracing more difficult.

A VPN may show the VPN server’s IP address instead of the user’s actual IP address. A public Wi-Fi network may have many users sharing one public IP address. A household router may serve several family members and guests. A mobile carrier may route thousands of users through shared infrastructure.

Because of this, IP address evidence is circumstantial. It may support an investigation but should not be the only basis for identifying a perpetrator unless corroborated by additional evidence.

XIV. Data Privacy Duties of Organizations Handling IP Logs

Organizations that collect and process IP logs should observe the following duties:

Provide a clear privacy notice;
Define the purpose of collection;
Limit collection to what is necessary;
Restrict access to authorized personnel;
Implement security controls;
Retain logs only for a justified period;
Dispose of logs securely;
Avoid unauthorized sharing;
Respond to data subject requests where applicable;
Report data breaches when legally required.

IP logs can become sensitive in practice because they may reveal behavior, location patterns, account activity, and security incidents. Organizations should treat them as confidential operational and personal data.

XV. Retention of IP Logs

Philippine law does not impose a single universal retention period for all IP logs. Retention depends on the purpose, industry, legal obligations, internal policy, cybersecurity needs, and possible litigation or investigation.

Under data privacy principles, logs should not be kept indefinitely without justification. A company may retain logs for a reasonable period for security, fraud prevention, audit, or legal purposes, but it should document the basis for retention.

Where litigation, investigation, or a security incident is reasonably anticipated, relevant logs should be preserved to prevent spoliation or loss of evidence.

XVI. IP Tracing and Cyber Libel

IP tracing may arise in cyber libel complaints when a complainant seeks to identify the person behind an allegedly defamatory online post. However, an IP address alone does not prove authorship. It may show that a device or network accessed an account or platform, but additional evidence is usually needed to prove that a particular person authored, published, or controlled the content.

Relevant supporting evidence may include account registration data, login history, device records, communications, admissions, screenshots, metadata, witnesses, platform records, and subscriber information lawfully obtained.

XVII. IP Tracing and Online Scams

In online scam cases, IP addresses may help identify login locations, account access, fraudulent transactions, or platform activity. However, scammers may use VPNs, compromised accounts, fake identities, public Wi-Fi, or foreign infrastructure. IP tracing is therefore only one part of a broader investigation.

Victims should preserve transaction records, screenshots, chat logs, account names, phone numbers, payment receipts, bank details, delivery information, platform URLs, email headers, and any IP logs lawfully available to them.

XVIII. IP Tracing and Unauthorized Account Access

When an email, social media, banking, or platform account is accessed without permission, login IP addresses may help determine suspicious activity. Many platforms provide account activity logs showing approximate locations and devices. The user may use this information to secure the account, report unauthorized access, and support a complaint.

However, platform-displayed location information is often approximate. The priority should be to change passwords, enable multi-factor authentication, revoke unknown sessions, preserve logs, and report the incident.

XIX. IP Tracing and Doxxing

Doxxing is the act of exposing personal information about someone without consent, often to harass, intimidate, shame, or endanger them. While Philippine law does not have a single statute titled “Anti-Doxxing Law,” doxxing may violate the Data Privacy Act, cybercrime laws, civil law rights, criminal provisions, and platform policies depending on the circumstances.

Publishing someone’s IP address may not always identify them, but combining it with names, addresses, photos, workplace details, family information, or threats can create serious legal exposure.

XX. IP Address Tracing by Employers

Employers in the Philippines may monitor company-owned devices, accounts, networks, and systems for legitimate business purposes. This may include logging IP addresses, login times, access attempts, and network activity.

However, employees retain privacy rights. Monitoring should be covered by a written policy, be reasonably necessary, be proportionate, and avoid unnecessary intrusion into personal communications or private accounts. Employers should not use cybersecurity monitoring as a pretext for excessive surveillance.

XXI. IP Address Tracing by Schools

Schools may monitor institutional networks, learning platforms, and school-provided accounts to protect students, prevent cheating, secure systems, and enforce policies. However, schools must consider student privacy, proportionality, child protection laws, and data privacy obligations.

Where minors are involved, additional care is required. Schools should avoid public disclosure of student IP logs or disciplinary conclusions without due process.

XXII. IP Address Tracing by Businesses

Businesses may use IP tracing for account security, fraud prevention, payment verification, anti-spam systems, website protection, and compliance. Businesses should ensure that their privacy notices disclose such processing and that IP logs are protected as confidential data.

Businesses that share IP logs with third-party service providers, cloud platforms, analytics tools, fraud detection vendors, or cybersecurity providers should have proper data processing agreements or contractual safeguards.

XXIII. Consent and Lawful Basis

Consent is important, but Philippine privacy law does not require consent for every instance of IP processing. Other lawful bases may apply, such as necessity for contract, compliance with law, legitimate interests, protection of lawful rights, or response to security incidents.

However, even when consent is not required, transparency and proportionality still matter. A company should not secretly collect or use IP data for purposes unrelated to the service or beyond what users reasonably expect.

XXIV. Cross-Border Issues

IP tracing often involves foreign platforms, foreign servers, foreign VPN providers, and multinational companies. A Philippine complainant may need records from platforms based outside the Philippines. Law enforcement may need to use official cooperation channels, platform request procedures, or international legal assistance mechanisms.

Foreign privacy laws may also affect access to data. Some companies disclose subscriber or account information only in response to valid legal process from the proper jurisdiction.

XXV. Evidentiary Issues

IP address evidence should be handled carefully. Courts and investigators may consider:

Whether the logs are authentic;
Whether timestamps are accurate;
Whether the correct time zone was used;
Whether the IP address was dynamic or static;
Whether the IP was shared;
Whether NAT or carrier-grade NAT was involved;
Whether port numbers are available;
Whether VPNs or proxies were used;
Whether the chain of custody was preserved;
Whether the evidence was lawfully obtained.

Attribution should not be based on IP address alone when other explanations are possible.

XXVI. Common Misconceptions

1. “An IP address reveals the exact home address of a person.”

Usually, it does not. It may reveal an approximate location or ISP, but not necessarily the user’s exact address.

2. “Anyone can ask an ISP who owns an IP address.”

Private persons generally cannot compel an ISP to disclose subscriber information without lawful process.

3. “An IP address proves who committed the act.”

Not by itself. It may indicate a connection source, but additional evidence is needed to identify the person responsible.

4. “Using a VPN makes someone completely untraceable.”

Not necessarily. VPNs may obscure the original IP address, but other evidence may still identify a user.

5. “IP tracing is always illegal.”

No. Many lawful cybersecurity, administrative, and investigative uses exist.

6. “IP tracing is always legal if the information is online.”

No. Public availability does not automatically remove privacy protections or legal duties.

XXVII. Practical Guidance for Victims of Cybercrime

A person who believes they are a victim of cybercrime should avoid illegal self-help. Instead, they should preserve evidence and report the matter properly.

Useful steps include:

Take screenshots showing URLs, usernames, timestamps, and full context;
Save chat logs, emails, headers, receipts, and transaction records;
Preserve account activity logs where available;
Avoid altering or deleting relevant data;
Report the incident to the platform;
Secure affected accounts;
Enable multi-factor authentication;
Report serious cases to proper authorities;
Consult counsel for legal action;
Avoid publicly accusing a person based only on an IP address.

XXVIII. Practical Guidance for Organizations

Organizations that trace or log IP addresses should adopt privacy-aware cybersecurity practices.

Recommended measures include:

Maintain a privacy notice covering log collection;
Identify the lawful basis for IP processing;
Use logs only for declared purposes;
Limit employee access to logs;
Encrypt or secure log storage;
Establish retention periods;
Document incident response procedures;
Train personnel on privacy and cybersecurity;
Use vendor contracts with data protection clauses;
Prepare for breach notification obligations.

XXIX. When IP Tracing May Require a Warrant or Court Order

A warrant or court order may be required when government authorities seek access to private communications, subscriber information, stored computer data, traffic data, or systems where a reasonable expectation of privacy exists. The exact requirement depends on the type of data, the method of acquisition, the investigating authority, and the applicable procedural rules.

For private parties, the safer rule is that they may collect and use only data available to them through lawful access. They should not attempt to obtain confidential ISP records or platform records without proper authority.

XXX. Liability for Illegal IP Tracing

A person or organization that illegally traces, obtains, discloses, or misuses IP address information may face several types of liability:

Criminal liability under cybercrime laws;
Criminal liability under other penal laws, depending on conduct;
Civil liability for damages;
Administrative liability under the Data Privacy Act;
Employment sanctions for unauthorized access or disclosure;
Contractual liability for breach of confidentiality;
Platform bans or account termination;
Evidentiary consequences in litigation.

The severity of liability depends on the method used, the information obtained, the harm caused, and the intent of the actor.

XXXI. The Role of the National Privacy Commission

The National Privacy Commission is the primary authority for data privacy matters in the Philippines. It may receive complaints, investigate data privacy violations, issue guidance, and enforce the Data Privacy Act.

Where IP address tracing involves improper collection, unauthorized disclosure, excessive retention, lack of transparency, or misuse of personal information, the matter may fall within the jurisdiction of the National Privacy Commission.

XXXII. The Role of Cybercrime Authorities

Cybercrime complaints may be brought to appropriate law enforcement units, such as cybercrime investigation units. These authorities may investigate offenses under the Cybercrime Prevention Act and related laws. Their work may involve technical tracing, preservation of data, coordination with platforms, and requests for subscriber information through lawful channels.

XXXIII. Balancing Privacy and Cybersecurity

Philippine law recognizes both the need for cybersecurity and the importance of privacy. IP tracing is often necessary to protect systems, prevent crime, and enforce rights. But it must not become an excuse for unlawful surveillance, harassment, or unauthorized disclosure of personal data.

The proper balance is achieved through legality, necessity, proportionality, transparency, accountability, and due process.

XXXIV. Conclusion

IP address tracing in the Philippines is legal when performed for a legitimate purpose, through lawful means, and in compliance with data privacy, cybercrime, constitutional, and evidentiary rules. It is commonly used in cybersecurity, fraud prevention, website administration, workplace monitoring, litigation, and law enforcement investigations.

However, IP tracing becomes legally dangerous when it involves hacking, unauthorized access, interception, deception, malware, doxxing, harassment, or unauthorized disclosure of personal information. An IP address may be personal information when it can identify a person directly or indirectly, especially when combined with other data. For this reason, organizations and individuals should treat IP logs with care.

An IP address is useful evidence, but it is rarely conclusive by itself. It should be corroborated with subscriber records, account data, device information, timestamps, platform logs, witness testimony, and other evidence obtained through lawful means.

In the Philippine legal context, the safest guiding principle is this: trace only what you are legally allowed to access, use the information only for a legitimate and proportionate purpose, protect the data from misuse, and seek proper legal authority when identification or enforcement requires private subscriber or platform records.

Note: This is a general legal article and not a substitute for advice from a Philippine lawyer on a specific case.