Taking someone’s picture without permission in the Philippines is not automatically illegal. The real question is where the photo was taken, what the person was doing, whether there was a reasonable expectation of privacy, and what happened to the photo afterward. A casual photo in a public place is very different from secretly taking a photo inside a home, zooming into a neighbor’s window, recording someone’s private parts, posting a humiliating photo online, or using someone’s face for business promotion.

Philippine law does not have one single “no pictures without consent” rule. Instead, several laws may apply depending on the situation: the Civil Code, the Data Privacy Act, the Anti-Photo and Video Voyeurism Act, the Safe Spaces Act, the Anti-Wiretapping Law, the Revised Penal Code, and cybercrime rules. This guide explains how these laws work in real life, what ordinary people can do if their photo was taken or posted without permission, and when the matter becomes serious enough for the police, prosecutor, court, school, employer, barangay, or National Privacy Commission.

Is Taking Pictures Without Permission Illegal in the Philippines?

The practical answer is:

Taking a picture without permission may be legal if it happens in a public place and does not invade privacy, harass, shame, exploit, sexualize, defame, or misuse personal data.

But it may become illegal, punishable, or civilly actionable when:

the photo was taken in a private place, such as a bedroom, bathroom, clinic, office room, changing area, hotel room, or private residence;
the person had a reasonable expectation of privacy;
the photo shows a sexual act or a private body area;
the photo is posted online to shame, harass, threaten, stalk, or sexualize someone;
the photo is used for business, advertising, identity fraud, doxing, or unauthorized profiling;
the photographer trespassed, peeped, installed a hidden camera, or pointed CCTV into another person’s private area;
the photo is paired with false accusations or defamatory captions;
the person photographed is a child, victim, patient, employee, student, customer, or other vulnerable person.

A simple way to think about it is this: public visibility reduces privacy, but it does not erase dignity, safety, data privacy, or protection from harassment.

The Main Legal Test: Reasonable Expectation of Privacy

Philippine courts often look at whether the person had a reasonable expectation of privacy. This means two things:

Did the person behave or situate themselves in a way showing they expected privacy?
Is that expectation something society would recognize as reasonable?

The Supreme Court applied this test in Spouses Hing v. Choachuy, where it said privacy under Article 26 of the Civil Code is not limited to a person’s house. It may extend to places or situations where the person has the right to exclude the public, and the test depends on the facts of each case. The Court also warned that surveillance cameras should not cover places where there is a reasonable expectation of privacy without consent. (Supreme Court E-Library)

This is why the same act can have different legal consequences:

Situation	Likely legal treatment
Taking a wide street photo where people are incidental background	Usually not illegal by itself
Taking a close-up of a stranger in public to mock them online	May lead to civil, harassment, or criminal issues depending on context
Taking a photo inside someone’s bedroom window	Strong privacy issue; possible civil and criminal liability
Taking a photo of someone breastfeeding, changing clothes, or using a restroom	Serious privacy and possible voyeurism issue
Posting someone’s photo with false claims that they committed a crime	Possible libel or cyber libel
Using a customer’s face in an ad without permission	Possible data privacy, civil, and commercial-use issue

Civil Code Protection: Privacy, Dignity, and Peace of Mind

Article 26 of the Civil Code requires every person to respect the “dignity, personality, privacy and peace of mind” of others. It specifically mentions acts such as prying into the privacy of another’s residence, meddling with private life or family relations, and vexing or humiliating someone based on personal conditions. Even if an act is not a criminal offense, it may still give rise to damages, prevention, or other relief. (Lawphil)

This is important because many photo-related disputes are not clear-cut crimes at first. For example:

a neighbor keeps taking pictures of your visitors;
a condo resident points a camera toward your balcony or window;
a former friend posts embarrassing photos to humiliate you;
a business uses your face in a promotional post without asking;
someone follows you around and takes photos to intimidate you.

In these situations, the person affected may ask for removal, file a civil action for damages, seek an injunction in proper cases, or use the incident as part of a broader complaint for harassment, stalking, unjust vexation, or data privacy violation.

Data Privacy Act: When Photos Become Personal Information

Under Republic Act No. 10173, or the Data Privacy Act of 2012, personal information includes information from which a person’s identity is apparent or can be reasonably and directly ascertained. The law also defines “processing” broadly, covering collection, recording, storage, use, disclosure, blocking, erasure, and destruction of personal data. (National Privacy Commission)

A photo or video can be personal information when it identifies a person. It may even involve sensitive personal information if it reveals health, age, religion, sexuality, case records, or other sensitive details.

However, the Data Privacy Act does not mean every selfie, group photo, or street photo needs written consent from everyone visible in the frame. The law has context. It excludes personal information processed for personal, family, or household affairs, and it also recognizes exemptions such as journalistic, artistic, literary, or research purposes. (National Privacy Commission)

The Data Privacy Act becomes more relevant when the person or entity handling the photo is acting as an organization, business, employer, school, government office, online seller, clinic, condo corporation, event organizer, or other personal information controller.

The National Privacy Commission has reminded the public that sharing photos and videos containing personal data must have a lawful basis and must follow the principles of transparency, legitimate purpose, and proportionality. The NPC also warns that irresponsible sharing can expose people to identity theft, fraud, cyberbullying, harassment, or stalking. (National Privacy Commission)

Examples of possible Data Privacy Act issues

A clinic posts a patient’s photo before-and-after treatment without clear consent.
A school posts a student’s face, name, grade level, and incident details in a public announcement.
A company uses an employee’s photo for marketing long after the employee resigned.
A lending app uploads a borrower’s contacts or photos to shame them.
A condo or business releases CCTV footage to a private group chat without a valid purpose.
A customer’s ID photo is shared publicly by a store employee.

For CCTV, the NPC has also issued guidance requiring organizations using CCTV systems to display notices showing the nature, scope, purpose, and extent of surveillance. Individuals recorded by CCTV generally have a right to reasonable access to footage in which they appear, subject to the Data Privacy Act and other laws. (National Privacy Commission)

Anti-Photo and Video Voyeurism Act: The Most Serious Photo Privacy Law

Republic Act No. 9995, or the Anti-Photo and Video Voyeurism Act of 2009, is one of the clearest Philippine laws on taking photos or videos without consent.

It applies when someone takes photo or video coverage of a person performing a sexual act or captures an image of a person’s private area without consent, under circumstances where that person has a reasonable expectation of privacy. It also punishes copying, reproducing, selling, distributing, publishing, broadcasting, showing, or exhibiting such material. (Supreme Court E-Library)

The law is strict because even if a person consented to the original recording, that does not automatically mean they consented to copying, sharing, posting, selling, or broadcasting it. RA 9995 imposes imprisonment of 3 to 7 years and a fine of ₱100,000 to ₱500,000, or both, at the court’s discretion. (Supreme Court E-Library)

Common examples covered by RA 9995

secretly filming someone changing clothes;
taking an “upskirt” or “downblouse” photo;
recording someone during sexual activity without consent;
sharing an intimate video after a breakup;
posting a private sexual image in a group chat;
threatening to upload intimate photos unless the victim pays or returns to the relationship.

This law may apply whether the place is public or private if the private body area would not reasonably be visible to the public.

Safe Spaces Act: Photos Used for Sexual Harassment

Republic Act No. 11313, or the Safe Spaces Act, also known as the “Bawal Bastos Law,” covers gender-based sexual harassment in streets, public spaces, online spaces, workplaces, and educational institutions.

For online conduct, the law includes acts targeted at a person that cause or are likely to cause mental, emotional, or psychological distress or fear of personal safety, including uploading or sharing photos without consent, video and audio recordings, cyberstalking, and online identity theft. (Supreme Court E-Library)

The law also specifically includes uploading and sharing, without the victim’s consent, media containing photos, voice, or video with sexual content, as well as unauthorized recording and sharing of photos, videos, or information online. Gender-based online sexual harassment is punishable by prision correccional in its medium period or a fine of ₱100,000 to ₱500,000, or both. (Supreme Court E-Library)

The Safe Spaces Act is especially relevant when the photo is used to sexualize, threaten, stalk, intimidate, or shame someone because of sex, gender, gender identity, gender expression, or sexuality.

Where Safe Spaces complaints may go

Depending on where it happened, the complaint may involve:

the PNP Women and Children Protection Desk;
PNP Anti-Cybercrime Group for online harassment;
the school’s Committee on Decorum and Investigation;
the workplace CODI or HR mechanism;
the establishment’s anti-sexual harassment officer;
the LGU or barangay anti-sexual harassment desk;
the city or provincial prosecutor.

The Safe Spaces Act also requires certain establishments, schools, and workplaces to provide mechanisms for complaints and to act on reported incidents. For example, restaurants, malls, cinemas, hotels, and similar places open to the public must adopt zero-tolerance policies and assist victims by coordinating with police and making CCTV footage available when ordered by the court. (Supreme Court E-Library)

Anti-Wiretapping Law: Be Careful With Videos That Record Audio

A photo is different from an audio recording. But many phone “videos” also capture conversations.

Republic Act No. 4200, the Anti-Wiretapping Law, makes it unlawful for a person who is not authorized by all parties to a private communication or spoken word to secretly overhear, intercept, or record that communication using a device. Violations are punishable by imprisonment of 6 months to 6 years, and if the offender is an alien, deportation proceedings may follow. (Lawphil)

This matters when someone secretly records a private conversation while pretending to take a video or selfie.

Examples:

secretly recording a private meeting;
recording a closed-door HR conversation;
taking a video of a couple arguing inside a private room while capturing their conversation;
recording a phone call without the consent of all parties.

A silent photo in a public place is usually not an Anti-Wiretapping Law issue. A secret recording of a private conversation can be.

Revised Penal Code: Unjust Vexation, Slander by Deed, Libel, and Cyber Libel

Some photo-related behavior may fall under the Revised Penal Code, depending on the facts.

Unjust vexation

Unjust vexation under Article 287 may apply to conduct meant to annoy, irritate, torment, distress, or disturb another person without lawful justification. Under Republic Act No. 10951, unjust vexation may be punished by arresto menor or a fine ranging from ₱1,000 to not more than ₱40,000, or both. (Supreme Court E-Library)

This may be considered when someone repeatedly photographs another person to harass, intimidate, or provoke them, even if no physical injury occurs.

Slander by deed

Article 359 punishes acts that cast dishonor, discredit, or contempt upon another person. RA 10951 updated the fines, including ₱20,000 to ₱100,000 for serious slander by deed, and up to ₱20,000 if not serious. (Supreme Court E-Library)

This may be relevant when the act of taking, showing, or staging the photo is itself humiliating.

Libel and cyber libel

If someone posts your photo with a false and damaging caption, the issue may no longer be just “taking pictures without permission.” It may become defamation.

Article 353 of the Revised Penal Code defines libel as a public and malicious imputation of a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or bring contempt upon a person. Article 355 covers libel committed by writing or similar means. (Lawphil)

For online posts, Republic Act No. 10175, the Cybercrime Prevention Act, treats libel committed through a computer system as cyber libel. In Disini v. Secretary of Justice, the Supreme Court explained that cyber libel is not a new crime but online defamation through a computer system as a “similar means” of committing libel. (Supreme Court E-Library)

In Causing v. People, the Supreme Court reiterated that cyber libel merely implements the Revised Penal Code provisions on libel when committed through a computer system. (Supreme Court E-Library)

Public Places: What You Can and Cannot Usually Photograph

In public places, people generally have a lower expectation of privacy. This includes streets, parks, sidewalks, public markets, plazas, transport terminals, public events, and other places where people are visible to others.

Usually acceptable situations include:

taking travel photos where strangers appear incidentally;
photographing a public event;
documenting an accident from a safe distance;
taking photos of traffic, buildings, signage, or scenery;
photographing public officials performing public functions, without obstruction or harassment.

But even in public, legal problems may arise if the photographer:

focuses on a private body area;
follows or stalks a person;
takes photos to ridicule, shame, or threaten;
posts the image with a false accusation;
records private conversations;
violates establishment rules;
interferes with police, medical, rescue, or emergency work;
photographs children in a harmful, exploitative, or sexualized context.

Public does not mean “anything goes.” A person may be visible in public but still protected from harassment, voyeurism, defamation, data misuse, and sexual exploitation.

Private Property, Malls, Condos, Schools, and Workplaces

Private establishments open to the public, such as malls, cafés, gyms, resorts, cinemas, hospitals, and schools, may impose reasonable photography rules. A mall guard, for example, may ask a person to stop taking photos if the establishment has a policy. A clinic may prohibit photos to protect patient confidentiality. A school may restrict photography of students.

But property rules do not automatically give private security the right to confiscate a phone, force deletion of files, or search a person’s gallery without lawful basis. In practice, disputes in establishments are often handled by asking the person to stop, leave, coordinate with management, or submit to police assistance if a crime is alleged.

For workplaces and schools, photos can create separate issues:

employee privacy;
student privacy;
Safe Spaces Act obligations;
Data Privacy Act compliance;
internal codes of conduct;
child protection policies;
confidentiality of investigations;
consent for marketing or public posting.

Schools and employers should be especially careful when posting photos involving minors, disciplinary incidents, medical conditions, complaints, or gender-based harassment.

Social Media: Is Posting Someone’s Picture Without Consent Illegal?

Posting someone’s photo online without permission is not always illegal, but it can become illegal or actionable depending on context.

The Supreme Court’s decision in Vivares v. St. Theresa’s College is often cited in social media privacy discussions. In that case, the Court found no privacy violation because the students failed to prove that the photos were truly limited to a protected private zone. The Court noted that Facebook posts viewable by friends or the public may lose privacy protection, especially when others can share or tag the content. But the Court also said the result might have been different if the post was limited to “Me Only” or a carefully screened custom audience. (Supreme Court E-Library)

This does not mean all Facebook photos are free for anyone to misuse. The safer rule is:

If the photo is public and used fairly, there may be no violation.
If the photo is used to shame, threaten, stalk, sexualize, defame, impersonate, exploit, or commercially promote something without permission, legal issues may arise.
If the photo contains personal data, sensitive data, children, private areas, or intimate content, the risk is much higher.

What to Do If Someone Took or Posted Your Picture Without Permission

1. Preserve the evidence immediately

Before asking the person to delete it, save proof. Deleted posts are harder to trace.

Collect:

screenshots showing the full post, caption, comments, account name, profile link, URL, date, and time;
the original image or video, if available;
screen recordings showing how the post appears online;
names of witnesses who saw the post;
messages, threats, or admissions from the person who posted it;
police blotter, incident reports, HR reports, school reports, or barangay records;
medical, psychological, or counseling records if the incident caused harm;
proof of identity and relationship if filing for a minor child.

For online evidence, avoid cropping too tightly. A screenshot showing only the photo may not prove who posted it, when, and where.

2. Identify the legal nature of the incident

Ask what the photo was used for:

If the issue is…	Possible legal route
Neighbor or acquaintance repeatedly taking intrusive photos	Civil Code, unjust vexation, barangay or police depending on facts
Photo inside home, bathroom, bedroom, clinic, or dressing area	Civil Code, possible criminal complaint
Intimate image, private body area, or sexual act	RA 9995, Safe Spaces Act, possible cybercrime
Photo posted with false accusation	Libel or cyber libel
Business, school, employer, condo, or clinic misused your image	Data Privacy Act, internal complaint, civil action
CCTV footage released without valid reason	Data Privacy Act, NPC complaint, possible civil action
Photo of a child in sexual or exploitative context	RA 11930, child protection laws, PNP/WCPD/NBI
Secret video with private conversation audio	Anti-Wiretapping Law

3. Request takedown or correction when safe

A written request helps create a record. Keep it short and factual:

identify the photo or post;
state why it violates your rights;
ask for deletion, takedown, correction, or non-reposting;
set a reasonable deadline;
save proof that the request was sent.

Avoid threats, insults, or counter-posting. Public online arguments often make the evidence messy and may expose both sides to defamation claims.

4. Report to the platform

For Facebook, Instagram, TikTok, X, YouTube, messaging apps, and marketplace apps, use the platform’s reporting tools. Report under privacy violation, harassment, bullying, impersonation, nudity, sexual exploitation, or non-consensual intimate content, depending on the case.

For intimate or child-related content, report immediately. Do not repost the material “as proof,” especially if it contains nudity, sexual content, children, or private body parts.

5. Go to the right office

The right office depends on the facts:

Situation	Where people commonly start
Immediate danger, threats, stalking, sexual harassment	Nearest police station, PNP Women and Children Protection Desk, or emergency hotline
Online harassment, cyber libel, intimate-image sharing, fake accounts	PNP Anti-Cybercrime Group or NBI Cybercrime Division
School incident	Class adviser, guidance office, school head, CODI, or child protection committee
Workplace incident	HR, CODI, grievance mechanism, DOLE route if labor-related
Business or organization misused your photo/data	Data Protection Officer, then National Privacy Commission
Neighbor dispute	Barangay, police, or prosecutor depending on seriousness
Civil damages or injunction	Proper trial court

For Data Privacy Act complaints, the NPC requires a formal complaint in a specific format. The complainant may download the form, print and fill it out, have it notarized, and submit it to the NPC in person, by courier, or by scanned email. (National Privacy Commission)

For criminal complaints requiring preliminary investigation, the Department of Justice lists common requirements such as an investigation data form, complaint-affidavit or sworn statement, and supporting evidence. (doj.gov.ph)

6. Prepare affidavits and supporting documents

A criminal or administrative complaint is usually affidavit-driven. This means your written sworn statement is important.

A strong affidavit usually includes:

your full name and personal circumstances;
how you know the person complained of, if known;
where and when the photo was taken or posted;
how you discovered it;
why you did not consent;
how it affected you;
links, screenshots, and attachments;
names of witnesses;
specific laws or acts complained of, if already identified.

If the complainant is abroad, documents for use in the Philippines may need consular notarization or apostille, depending on where they are executed. Philippine embassies can notarize private documents such as affidavits for use in the Philippines, while apostille may be an alternative for documents notarized before a local notary in an Apostille Convention country. (Philippine Embassy)

Practical Timelines and Bottlenecks

Timelines vary widely depending on the office, location, evidence, and seriousness of the case.

Process	Typical practical timeline	Common bottlenecks
Platform takedown request	Hours to several days	Wrong report category, incomplete proof, reposts from other accounts
Barangay discussion or settlement efforts	Around 15 to 30+ days in many disputes	Non-appearance, wrong venue, serious offenses not suitable for barangay
Police blotter or initial report	Same day if station accepts report	Need for clearer evidence or referral to cybercrime unit
Cybercrime evidence assessment	Days to weeks	Anonymous accounts, deleted posts, need for preservation requests
Prosecutor preliminary investigation	Several months or longer	Incomplete affidavits, respondent counter-affidavit, technical evidence
NPC complaint	Several months or longer	Need to prove personal data processing, controller identity, and harm
Court injunction or civil case	Months to years	Filing fees, evidence, hearing schedules, service of summons

For barangay conciliation, the Local Government Code provides short settlement periods for the lupon/pangkat process, including a 15-day period for the pangkat to arrive at settlement, extendible for another period not exceeding 15 days in certain cases. (Lawphil)

Serious offenses such as voyeurism, online sexual harassment, child exploitation, threats, or cases with higher penalties should not be treated as simple neighborhood misunderstandings.

Common Scenarios

A stranger took my picture in a mall

If it was a casual background shot, there may be no legal issue. If the stranger focused on you, followed you, took sexualized shots, or posted the photo to mock or harass you, report it to mall security and ask management to preserve CCTV. If the act is sexual, threatening, or repeated, go to the police or PNP Women and Children Protection Desk.

My neighbor’s CCTV points at my window

This is a serious privacy concern. In Spouses Hing v. Choachuy, the Supreme Court recognized that CCTV should not be used to pry into areas where another person has a reasonable expectation of privacy. A written demand, barangay record, photos showing the camera angle, and a request for adjustment are practical first steps. If the intrusion continues, civil or injunctive remedies may be considered. (Supreme Court E-Library)

Someone posted my embarrassing photo in a group chat

Save screenshots showing the group name, members if visible, sender, date, and caption. If it was meant to shame or harass you, possible routes include civil action, unjust vexation, Safe Spaces Act, school/workplace complaint, or cybercrime depending on the content.

My ex threatened to upload intimate pictures

Treat this urgently. This may involve RA 9995, Safe Spaces Act, threats, coercion, and cybercrime. Save the threats without reposting the images. Report to the PNP Women and Children Protection Desk, PNP Anti-Cybercrime Group, NBI Cybercrime Division, or local prosecutor.

A business used my photo for an advertisement

A business should be cautious about using a person’s identifiable image for marketing without a clear lawful basis or release. Ask for takedown and request information on how they obtained and used the image. If the business refuses, the matter may involve the Data Privacy Act, civil damages, and commercial misuse of personality rights.

A foreigner took or posted the photo

Philippine criminal and civil laws generally apply to acts committed in the Philippines, regardless of nationality. Some laws also mention immigration consequences for alien offenders. For example, RA 4200 provides deportation proceedings for an alien offender after conviction, and RA 11313 provides deportation consequences for an alien who commits gender-based online sexual harassment after serving sentence and paying fines. (Lawphil) (Supreme Court E-Library)

Frequently Asked Questions

Is it illegal to take a picture of someone in public in the Philippines?

Not automatically. If the person is in a public place and the photo is not intrusive, sexual, defamatory, harassing, or misused, taking the picture may not be illegal by itself. But public location does not excuse stalking, voyeurism, humiliation, data misuse, or sexual harassment.

Can someone post my picture on Facebook without my consent?

Sometimes yes, sometimes no. A normal group photo or public-event photo may not be illegal. But if the post shames you, threatens you, exposes private information, uses your image commercially, contains sexual content, or includes false accusations, several laws may apply, including the Civil Code, Data Privacy Act, Safe Spaces Act, RA 9995, or cyber libel rules.

Can I force someone to delete my photo?

You can demand deletion, report the post to the platform, complain to the organization involved, file with the NPC for data privacy issues, or pursue civil/criminal remedies if the facts support a violation. Whether a court or agency will order deletion depends on the legal basis and evidence.

Is it legal to take photos of police officers or public officials?

Taking photos of public officials performing public functions in public places is generally less private than photographing private individuals in private settings. But the person taking photos should not obstruct operations, enter restricted areas, interfere with an arrest or emergency response, record private communications unlawfully, or post defamatory claims.

Is it illegal to take pictures of children without parental consent?

Not always, such as incidental photos at public events. But extra care is required. Photos of children may raise child protection, school policy, privacy, and exploitation concerns. Sexualized, humiliating, identifying, or harmful use of a child’s image can become a serious legal matter.

What if the picture shows my private parts or an intimate moment?

This may fall under RA 9995, the Anti-Photo and Video Voyeurism Act, especially if the image shows a sexual act or private body area without consent under circumstances where you had a reasonable expectation of privacy. Sharing or posting it may be punishable even if the original recording was consensual. (Supreme Court E-Library)

Can I secretly record a video as evidence?

Be careful. A silent video in a public setting is different from secretly recording a private conversation. RA 4200 prohibits secret recording of private communication or spoken words without authorization from all parties. (Lawphil)

Can my employer or school post my photo online?

They should have a legitimate purpose and comply with privacy, school, employment, and Safe Spaces rules. Posting routine event photos may be acceptable in many settings, but posting disciplinary, medical, sensitive, embarrassing, or harassment-related images can create legal risk.

Does the photographer own the photo even if I am in it?

Copyright ownership and privacy rights are different. A photographer may have rights over the image they created, but that does not automatically give them the right to invade privacy, publish intimate content, defame someone, violate data privacy rules, or use another person’s face commercially without proper basis.

What is the fastest first step if my photo is being shared online?

Preserve evidence first, then report the post to the platform. If the content is intimate, sexual, threatening, child-related, or rapidly spreading, report to the appropriate cybercrime or women-and-children desk and avoid reposting the material yourself.

Key Takeaways

Taking pictures without permission in the Philippines is not automatically illegal, especially in public places.
The main issue is whether the person had a reasonable expectation of privacy and whether the photo was used in a harmful or unlawful way.
Article 26 of the Civil Code protects dignity, privacy, personality, and peace of mind.
The Data Privacy Act may apply when identifiable photos are collected, stored, used, shared, or posted by organizations, businesses, schools, employers, or other controllers.
RA 9995 is the key law for non-consensual intimate photos, private body areas, and voyeurism.
The Safe Spaces Act may apply when photos are used for gender-based sexual harassment, online harassment, stalking, or sexualized abuse.
The Anti-Wiretapping Law can apply when a video secretly records a private conversation.
Posting a photo with false and damaging captions can become libel or cyber libel.
Strong evidence matters: save screenshots, URLs, timestamps, account details, witnesses, and original files before the post disappears.
The right office depends on the facts: barangay for some local disputes, police or prosecutor for crimes, PNP/NBI cybercrime units for online abuse, NPC for data privacy violations, and school or workplace mechanisms for internal incidents.