Republic Act No. 9995 protects people in the Philippines against specified nonconsensual intimate-image recording and circulation. It can apply to a phone, DSLR, webcam or CCTV camera: what matters is the image, the conduct, consent and the relevant expectation of privacy. Agreeing to intimacy or to a recording does not, by itself, authorize its later copying or sharing. RA 9995, Sections 3–4.
Evidence and action
If this is happening now: leave an unsafe place if you can. Call 911 for an immediate emergency. For violence or exploitation involving a child, contact MAKABATA 1383, the police or a local social worker. You do not need to confront the person or obtain another copy before asking for help. DILG emergency guidance; DSWD child-protection guidance.
What to Do If This Happens to You
- An intimate image or video is already online: record the post URL, account identifiers and timing without reproducing the image; report the post and seek removal through the platform, hash-matching and Google options below. Report suspected offenses through the police/NBI and support routes. Removal and investigation can proceed in parallel.
- Someone threatens to publish it, demands money or asks for more images: prioritize safety, do not send further images or money, and keep the threatening text and demand details where safe. Follow the sextortion guide, observing this page’s child-image handling limits. You do not have to wait for publication to ask for help.
- You suspect secret recording or discover a camera: leave the exposed area, note the time/location and seek help. Avoid confrontation, dismantling the device or browsing its files. Use the safe first steps and evidence guidance, then the reporting options.
These routes form a connected protection series: this RA 9995 guide explains capture and sharing; the sextortion guide addresses coercive threats and demands; the removal section covers images already posted. If a child is involved, follow the stricter safeguards below from the start.
“Boso” is a familiar term for voyeuristic behavior, but it is broader than the specific offenses in RA 9995. This guide explains those boundaries, practical examples, safe reporting and related remedies. The scenarios are hypothetical. The person responsible for abuse is responsible for their conduct; being recorded, trusting a partner or being unable to stop a leak does not make the victim at fault.
What does RA 9995 cover?
The law’s short title is the Anti-Photo and Video Voyeurism Act of 2009, although it was approved on February 15, 2010. Its focus is dignity and privacy, not a general prohibition on photography. It applies to persons generally, rather than only to women or only to strangers. The statutory definition of private areas, however, specifically refers to the female breast as well as naked or undergarment-clad genitals, pubic area and buttocks. Sections 1–4.
For the capture offense under Section 4(a), the Supreme Court identified three elements:
- A photo or video captures a person performing a sexual act or similar activity, or captures a statutorily defined private area.
- The person did not consent to that capture.
- The circumstances gave the person a reasonable expectation of privacy.
This is the test stated in XXX261049 v. People, G.R. No. 261049, June 26, 2023. Recording need not first go viral: unlawful capture is itself a prohibited act.
Privacy can exist in a public place
Section 3(f) covers circumstances where a reasonable person would believe they could undress privately, or that a private area would not be visible to the public, whether the place itself is public or private. A shopping mall is public-facing, but a fitting room is private. A person walking in public does not ordinarily expose what is beneath their clothing to cameras. Conversely, a normal photograph of fully clothed people in a lobby is not automatically an RA 9995 offense. The actual image and surrounding circumstances matter. Sections 3(f) and 4(a).
What if someone peeps but does not record?
Peeping without any photo, video or image capture does not automatically establish the Section 4(a) recording offense. That does not mean the conduct is harmless or necessarily lawful. Depending on the facts, gender-based harassment under the Safe Spaces Act, intimate-partner abuse under RA 9262, or civil privacy remedies may be relevant. Report what happened accurately, including whether a device, image or transmission was actually observed. See the related-law map below.
Consent to intimacy, recording and sharing are different questions
Consent to sexual activity does not supply consent to recording it. Consent to making a recording does not supply permission to circulate it. RA 9995’s definition addresses downstream use without the depicted person’s written consent, and Section 4 expressly says that its reproduction, distribution and publication prohibitions apply even when recording was consensual. Sections 3(d) and 4.
| Provision | Conduct addressed | Practical question |
|---|---|---|
| Section 4(a) | Taking covered sexual-activity footage or capturing a defined private area without consent, with a reasonable expectation of privacy | What was captured, and did the person consent to that capture? |
| Section 4(b) | Copying or reproducing the specified photo, video or recording of a sexual act or similar activity, with or without payment | Who made or caused a new copy? |
| Section 4(c) | Selling or distributing the specified recording of a sexual act, including originals and copies | Who circulated it or caused it to be circulated? |
| Section 4(d) | Publishing, broadcasting, showing or exhibiting the specified sexual-act or similar-activity footage through the listed media or similar means | Who exposed it to other viewers? |
The wording of the downstream provisions must be read with Section 3(d); it should not be flattened into a claim that every unwanted photo or every digital file is covered. A private group chat, one-to-one forwarding, screen recording or displaying covered footage on a phone can still raise copying, distribution or exhibition issues. Payment, a large audience and a revenge motive are not universal requirements.
Being a spouse, partner, photographer, camera owner or original recipient does not itself authorize sharing. Neither does a credit, a “for awareness” caption or the fact that somebody else already leaked the material. Written permission also cannot legalize coercion, child sexual abuse or other independently unlawful conduct. For child-related material, use the stricter child-protection route.
Which devices and outputs can be involved?
RA 9995 is technology-neutral. Section 3(b) defines capture broadly, including photography, filming, recording by any means and broadcast. The following are everyday examples, not a statutory list or a finding that owning or using a device is illegal. Apply the legal elements to its actual use. Sections 3(a)–(b) and 4.
| Device or method | Possible output | What needs checking |
|---|---|---|
| Phone or tablet | Still photo, video, screenshot, screen recording or livestream | Original capture and later copying/sharing are separate acts. |
| DSLR, mirrorless or compact camera | Digital or printed photographs and video | A professional camera or long lens does not remove privacy protection. |
| CCTV, IP camera or other security camera | Live camera feed, stored footage, still frame or exported clip | Check placement, scene, access and disclosure, as well as applicable NPC rules. |
| Webcam or laptop camera | Video-call imagery, saved video, still capture or stream | Agreeing to a call does not itself authorize the other person to record or distribute covered imagery. |
| Action camera, body camera or dashcam | Video, audio-video or extracted stills | The recorded scene still matters; separate operational rules may apply. |
| Camera-equipped drone | Aerial stills, video or live transmission | Distance and a public launch location do not decide the subject’s privacy. |
| Camera-equipped smart glasses or other wearable | Photos, video or live transmission | A less noticeable camera is still an image-capture device. |
| A camera concealed in an everyday object | Photos, video or transmitted images | Concealment and placement may be relevant facts; do not handle or dismantle a suspected device to investigate it yourself. |
A still image can matter; a saved file is not the only possible output. A broadcast can fall within the Act’s definitions even if the sender says nothing was stored. The exact live-feed facts still need assessment. Audio alone is a different question from photo/video voyeurism; the Anti-Wiretapping Act and other privacy rules may need to be considered. See recording someone without consent.
Device neutrality under RA 9995 does not mean every device has identical privacy-regulatory rules. For example, the NPC has separate body-worn-camera and alternative-recording-device rules.
Common problems, examples and safer solutions
These examples identify possible routes, not predetermined criminal liability.
- A phone is aimed beneath someone’s clothing on public transport. An image of a covered private area without consent can engage RA 9995 despite the public location. Move toward help, alert staff or police if safe, and note the time, vehicle and witnesses. Do not wrestle for the device.
- A DSLR photographs someone undressing through a bedroom window. A camera outside the home does not automatically defeat the person’s reasonable expectation of privacy inside. Move out of view, seek safety, record the circumstances and report. Do not trespass to seize the camera.
- A camera is discovered in a bathroom or changing area. Leave the exposed area and seek help. Record the location and what you observed from a safe place; ask police to handle the device and evidence. Do not reset it, browse its storage or publish sample footage.
- A former partner threatens to leak a consensually made intimate video. Keep the threat text, account identifiers and demands. Seek safety and report without waiting for a leak. Threats, coercion, online sexual harassment and, in qualifying relationships, RA 9262 may apply alongside any completed recording or sharing offense.
- A friend forwards an intimate clip “just to warn the group.” Further copying or distribution can create fresh exposure and possible liability. Do not forward it onward. Report the original post/message and privately give the affected person the reporting information without attaching the clip.
- An ordinary lobby CCTV clip is embarrassing but contains no covered intimate scene. RA 9995 is not automatically the correct law. Ask about purpose, authorized access, publication and data-subject rights under privacy law. The full CCTV guide explains the broader framework.
- Someone creates a sexual deepfake of an adult. Preserve the post’s location and threats, report it as manipulated/nonconsensual sexual imagery, and obtain advice on the facts. Do not assume RA 9995 automatically resolves synthetic media that did not record the depicted person doing the activity. Other laws and platform policies may help.
- A class group shares sexual imagery involving a child. Do not download, screenshot or forward the image. Record the account, URL/message location and timing without reproducing it; report to the platform and child-protection authorities. Do not blame or discipline the child for seeking help.
The first three scenarios apply RA 9995’s capture test; the remaining branches are explained in the related-law map and removal guidance.
Does a CCTV sign make recording or sharing lawful?
A CCTV notice is not blanket consent. The NPC distinguishes informing people through a privacy notice from obtaining consent. An operator needs an applicable lawful basis and must meet necessity, proportionality, transparency and security requirements. Those privacy-law requirements do not replace RA 9995’s separate consent and protected-image rules. NPC Circular 2023-04, Section 3(D)(5); NPC Circular 2024-02, Sections 4–5.
The current CCTV circular took effect on August 27, 2024 and replaced NPC Advisory 2020-04. It strictly prohibits CCTV in heightened-privacy places such as fitting rooms, toilets/restrooms and lactation/breastfeeding rooms. Calling a camera “for security” does not make every placement lawful. The circular also addresses intrusive views into private yards and windows. NPC announcement; Circular 2024-02, Section 5.
The household exclusion is limited. Noncommercial personal or household use within property boundaries may be outside the circular, but cameras capturing people beyond those boundaries, especially in public spaces, fall outside that household exclusion. An exclusion from a CCTV privacy rule is not an exemption from RA 9995 or other criminal and civil laws.
How can you request preservation or access?
If it is safe, send the establishment’s designated contact a written request identifying the camera location, date, approximate time and footage needed. Ask it to preserve the specified segment and explain its secure access process. Do not demand everyone’s unrestricted footage. If the operator may be the abuser, or contacting it could endanger you or evidence, ask police or counsel to handle the approach.
Under Circular 2024-02, a written notice of intent to view or obtain specified footage triggers preservation, but the request’s requirements must be completed within 30 days to avoid abandonment. For completed requests, the circular provides five working days for viewing and 15 working days for copies, with an extension of up to 15 additional working days for complex or numerous footage, accompanied by written reasons and an intended compliance date. Access and disclosure remain qualified; other people’s privacy and applicable legal restrictions must be considered. Request secure viewing or appropriately limited copies, and do not publicly repost intimate footage. Sections 6–10.
What should a victim or helper do first?
The following sequence is practical harm-reduction guidance. It does not guarantee admissibility, removal or prosecution.
- Prioritize safety. Move away from a suspected camera or threatening person. Use a safe device if you think a partner monitors yours. Ask a trusted person, social worker or lawyer to help.
- Do not confront, negotiate alone or investigate by intrusion. Do not hack an account, guess a password, seize a device or arrange a meeting to recover a file. For extortion, do not send more images or money in the hope of a guaranteed deletion. If you already paid or complied, you can still seek help.
- Record non-image details. Note the platform, account name/handle/ID, profile and post URLs, message location, date/time/time zone, threatening text, demands, transaction references and witnesses. Separate what you personally observed from what someone told you.
- Limit further exposure. Do not repost the material, send it to group chats, upload it to CyberCode, or submit it to a general-purpose AI or reverse-image-search service. Where safe, preserve the non-image details before blocking the account.
- Ask about lawful handling of existing files. Explain to PNP/NBI or counsel what device or file already exists. Do not unnecessarily edit, copy, export, reset or delete potential evidence. Follow a controlled, lawful handover process rather than emailing intimate attachments to everyone involved.
- Report and keep the trail. Save acknowledgments and reference numbers from police, platforms and other agencies. Record which URL each report covers, the result and any appeal option.
- Review account access safely. If an account may be compromised, use a trusted device to review sessions and recovery details and strengthen authentication. Consider whether changes could alert an abusive partner; a safety plan may be needed first.
The electronic-evidence checklist offers broader context, but the intimate-image and child-safety limits on this page take priority over generic advice to take screenshots or make backups.
When the person depicted was under 18
Do not download, screenshot, print, request, forward or upload sexual imagery of a child to build an evidence folder. Record its location and non-image details instead. If it already exists on a device, stop interacting with it, restrict access and promptly ask investigators or counsel how to handle it lawfully. Do not ask the child to resend it or show it repeatedly. These are safety recommendations consistent with NCMEC’s no-download/no-sharing guidance and Google’s child-image reporting guidance.
RA 11930 covers online and offline child sexual abuse/exploitation material, including specified simulated and computer-generated representations. The child’s apparent consent is not a defense to the prohibited acts. The law also recognizes limited legitimate reporting/investigation exceptions; those are not a reason for the public to collect or circulate abusive material. Under Section 22, a child who produces self-generated sexualized material is treated as a victim, not an offender. RA 11930, Sections 3–5, 7–8 and 22.
How can you seek removal or reduce resharing?
Platform reporting, hash-matching services and Google Search removal do different things. None guarantees deletion from every device or website, and none replaces a police report.
- Report the actual post, account and threats to the platform. Choose the intimate-image abuse, sexual exploitation or threat category that fits. Keep report IDs and use an appeal/review option if offered. Meta describes specific reporting tools for threats to share private imagery in its sextortion guidance.
- For eligible adult imagery, consider StopNCII.org. It is for the person depicted, subject to its age/eligibility rules, with an existing file. A digital fingerprint is generated on the device; the image itself is not uploaded. Participating services assess matches under their policies. It does not cover the whole internet or encrypted messaging, and edits may defeat matching. Check the eligibility questions and limitations.
- For imagery made when you were under 18, consider Take It Down. It can be used even if you are now an adult. Use a file already available on the original device; do not download or transfer one to use the service. Only a locally generated hash is submitted. Coverage is limited to participating public/unencrypted services, and removal everywhere is not guaranteed. Read the official FAQ or Tagalog guidance.
- Request Google Search removal separately. Google has routes for adult nonconsensual and fabricated sexual imagery and child sexual abuse imagery. Search removal does not remove the source website’s copy. Do not take or upload screenshots containing child sexual imagery.
Make reports through verified official pages or the platform’s own app. Be wary of paid “recovery” or “deletion” services promising complete erasure or asking for passwords, account codes or more intimate files. For coercive demands, see the sextortion first-response guide.
Where can you report and get legal help?
You can ask for help before you know the suspect’s real name or the exact charge. Describe the conduct and provide the identifiers you do have. An online message or police blotter is not the same as a completed criminal complaint or a court case.
- Police / PNP Anti-Cybercrime Group: for suspected recording, circulation, online threats and related cybercrime. A March 18, 2026 joint government advisory lists acg@pnp.gov.ph and (02) 8723-0401, local 7491. The nearest police station can help route the report; ask for the Women and Children Protection Desk where relevant.
- NBI Cybercrime Division: the same advisory lists ccd@nbi.gov.ph and (02) 8523-8231 through 38. Check the NBI contact page or regional-office directory before travelling. NBI’s published investigative-assistance process includes intake, interview and sworn statements.
- Children and qualifying partner-abuse situations: ask the local social-welfare office or police protection desk about safeguarding, support and appropriate referrals. For a child, MAKABATA 1383 is an official reporting route. In qualifying RA 9262 cases, ask about appropriate protection orders as well as criminal remedies.
- National Privacy Commission: for a possible Data Privacy Act violation, including an organization’s misuse or disclosure of personal data/CCTV. Use the NPC complaint process. Its general process requires a prior written approach to the respondent and proof of no timely/appropriate action or no response within 15 calendar days. If contact would be unsafe or urgent intervention is needed, ask the NPC or counsel about the applicable procedure; do not delay an emergency or criminal report for this administrative step.
- Legal assistance: contact PAO to ask about advice and eligibility for representation, or the IBP National Center for Legal Aid / local chapter. Assistance depends on the relevant requirements.
PNP/NBI contacts above are published in the DICT–NPC–SEC advisory, page 3. It is used here as an official contact source, not as legal authority about voyeurism. Contact details were checked online; phone availability was not tested. Start with a brief account and ask for the safe evidence-submission process rather than sending intimate attachments in an initial email.
What should you bring or prepare?
- A chronological account of what happened, where and when
- Known identities, account identifiers and URLs; label unknown or uncertain facts honestly
- Threat text, consent/refusal context and agreed limits, without unnecessary intimate reproductions
- Witness details, prior report/reference numbers and any relevant payment records
- A description of devices or existing evidence so investigators can advise on examination and handover
Ask the receiving office about identification, complaint-affidavits, witness statements and secure evidence requirements. Keep copies of ordinary paperwork and receipts. Use the CyberCode reporting directory to distinguish investigative, regulatory and platform routes.
Which related laws may help?
One incident may raise more than one legal issue, but multiple charges or penalties are not automatic. Each offense has its own elements, and investigators/prosecutors must assess the facts and legal overlap.
| Law / route | When it may matter | Important limit |
|---|---|---|
| RA 11313, Safe Spaces Act | Gender-based sexual harassment in public spaces or online, including relevant sexual threats, cyberstalking and nonconsensual sexual-media sharing | Assess the defined conduct and context; not every unpleasant message or unwanted ordinary photograph satisfies it. Read the guide. |
| RA 9262, Anti-VAWC Act | Qualifying abuse against a woman or her child by a spouse, former spouse, dating/sexual partner or person with whom she has a common child; threats and psychological abuse may be relevant | Relationship, conduct and other elements must be established. It is not the legal route for every victim or relationship. Ask about appropriate protection orders. |
| RA 10175, Cybercrime Prevention Act | ICT-assisted commission of an existing offense, or separate illegal access, identity theft or other cybercrime | Section 6 can affect penalties when applicable; do not assume every online complaint automatically produces an additional conviction. |
| RA 11930, OSAEC and CSAEM Act | Child sexual exploitation, grooming, sexual extortion, specified simulated/AI material, and prohibited access, possession, production or circulation | Special child-protection rules apply; apparent consent is not a defense. This law repealed RA 9775. Read the child-protection guide. |
| RA 10173, Data Privacy Act | Unlawful collection, use, access or disclosure of identifiable personal data, including certain photos and CCTV | Scope, lawful basis, purpose, exemptions and data-subject rights must be assessed. Consent is not the only possible lawful basis. Read the privacy guide. |
| Civil Code, including Articles 19–21 and 26 | Privacy invasion and other wrongful conduct may support damages, prevention or other relief | A civil remedy is distinct from proving an RA 9995 crime; loss, injury, available relief and procedure require assessment. |
Threats, demands and forced conduct may also call for assessment under the Revised Penal Code. “Sextortion” describes a pattern of abuse; the charge depends on what was threatened or done. For adult sexual deepfakes, existing laws and platform rules may be relevant, but the application of a capture-focused statute to synthetic imagery must not be assumed. See sexual deepfakes and voice-cloning remedies.
Penalties, evidence and where a case proceeds
What are the RA 9995 penalties?
Section 5 specifies an imprisonment range of three to seven years and a fine range of ₱100,000 to ₱500,000, with the statute providing for “or both, at the discretion of the court.” It also provides additional consequences involving juridical persons, public officers/employees, professionals and foreign offenders. The actual sentence, any ICT-related qualification and civil damages depend on the charge, proof and applicable law; these figures are not a guaranteed award to a victim. RA 9995, Section 5.
Can the recordings be used as evidence?
Do not assume every recording is automatically admissible or that every recording must be destroyed. Section 6 provides a specific court-authorized route for a peace officer’s evidentiary use. Section 7 states an exclusion for material obtained or secured in violation of the preceding sections. Authentication, collection, the purpose of use and the particular proceeding matter. Get advice on lawful preservation and controlled submission. Sections 6–7.
In XXX261049 v. People (2023), the Supreme Court upheld convictions based on the proven circumstances, testimony and still images admitted without objection. The decision explains the capture elements and sufficiency of proof. It does not announce that every victim-made copy is admissible or supply a general exception to Section 7. Missing a perfect recording or reacting in fear is a reason to ask investigators what other evidence matters, not a reason to blame yourself or assume no help is available.
Which court and place?
A standalone RA 9995 charge ordinarily falls within Regional Trial Court criminal jurisdiction because its maximum prison term exceeds six years. The usual territorial rule places a criminal action where the offense or an essential ingredient occurred, subject to special laws. A complainant should begin with investigation/prosecution assistance rather than assume they can file directly in any court they prefer. BP 129, Section 20; RA 7691, Section 2; Rule 110, Section 15.
Where RA 10175 is invoked, the proper court and venue depend on the charge. Section 2.1 of the Rule on Cybercrime Warrants distinguishes offenses under RA 10175 Sections 4–5 from other crimes committed through ICT under Section 6. Ask the prosecutor or counsel to identify the proper venue and any cross-border issues; the location of a server or victim alone is not a universal answer for every charge. RA 10175, Section 21; Rule on Cybercrime Warrants, Section 2.1.
Investigation, prosecutor review and trial are different stages. The current DOJ preliminary-investigation framework uses a standard of prima facie evidence with reasonable certainty of conviction; a criminal conviction still requires proof beyond reasonable doubt. Ask the receiving office for the current process and any deadline that applies to your case. Do not wait on a platform’s decision before getting advice about prescription or other legal time limits. Supreme Court explanation, March 11, 2026.
Frequently asked questions
Must the image show my face?
A visible face is not listed as a separate element of Section 4(a). Identifying the affected person, proving the covered content and connecting the conduct to the accused still require evidence. Clothing, surroundings, witnesses and other context may matter; avoid publishing them to prove identity. Section 4(a); XXX261049.
Can a man be a victim?
Yes. RA 9995 refers to a person or persons. Its specific private-area definition includes female breast; other defined areas and covered sexual-activity recordings are not limited to female victims. Sections 3–4.
Does the clip have to be posted publicly?
No. Unlawful capture does not require publication, and the Act separately addresses copying, distribution and showing covered material. A private message is not a general safe harbor. The exact act and the statutory coverage must still be established. Section 4.
Can I post a blurred version to warn others?
That can spread the abuse, expose identity through context and create legal risks. Blurring a face does not necessarily remove the covered material or identify all affected people safely. Report privately using identifiers and URLs; do not publish an “evidence” thread containing the footage.
What if the file is fake or the sender is anonymous?
Say clearly that authenticity or identity is unknown. Preserve the threatening text, account identifiers and source location, and report the conduct. Do not pay for a promised deletion or accuse a named person without a factual basis. For fabricated imagery, use the platform’s manipulated/nonconsensual-image route as well as appropriate legal advice.
Can CyberCode receive my intimate evidence or file my case?
No. This page is an educational resource, not an evidence-upload service, emergency responder or law office. Do not send intimate files or identifying case details in public comments. Use the verified reporting and support channels above.
Reducing future risks without blaming victims
Individuals can review shared-album access, account recovery and device permissions, and seek help when a camera seems out of place. These steps reduce risk; they cannot guarantee privacy or make a victim responsible for another person’s abuse.
Schools, employers, hotels and camera operators should provide a discreet reporting contact, prohibit forwarding abusive material, restrict access to recordings, document lawful disclosure and preserve relevant evidence through authorized procedures. Staff should avoid repeatedly asking a victim to display intimate content. Review camera placement, retention and access controls under the applicable privacy rules, and provide appropriate safeguarding referrals. NPC CCTV requirements; Safe Spaces Act.
Sources and legal authorities
- RA 9995, Anti-Photo and Video Voyeurism Act, especially Sections 3–7; Supreme Court E-Library copy
- XXX261049 v. People, G.R. No. 261049, June 26, 2023
- NPC Circular 2024-02 and NPC Circular 2023-04
- RA 11313; RA 9262; RA 10175; RA 11930; RA 10173; Civil Code
- Official agency contacts, procedural sources and platform guidance are linked beside the relevant steps. Platform tools are harm-reduction services, not Philippine court remedies.
Disclaimer
Cybercode.ph provides general Philippine legal and safety information. It is not a substitute for advice on a particular incident, emergency assistance or a lawyer’s assessment. Applicable offenses, evidence handling, remedies and deadlines depend on the facts. Do not upload intimate evidence to this website.
Related articles
Sources rechecked as of: 2026-10-04