BosesPH

Open Petition 001 · For the Senate

The One-Click Unsubscribe Act

Gmail already forces this on senders. Philippine law doesn't.

Every promotional message sent to a Filipino should have an exit that works on the first tap. No login. No reply-YES-to-confirm. No preference center with fourteen checkboxes. One tap, and it stops within 48 hours.

What it is

One rule, applied to everyone who messages you.

A proposed law requiring any business that sends promotional email, SMS, app push notifications, or messaging-app broadcasts to people in the Philippines to include an unsubscribe that works in a single action, costs nothing, and is honored within 48 hours.

It doesn't ban marketing. It doesn't touch receipts, OTPs, or delivery updates. It sets a floor on the exit, names a regulator, and attaches a real penalty to a broken unsubscribe link.

What you get

Six things that change the day it passes.

One action and it stops

No account, no login, no form, no "tell us why you're leaving."

48 hours, not "10 business days"

A company can't sit on it or squeeze in one last campaign while it processes.

Every channel, one rule

Email, SMS, app push, and Viber broadcasts all follow the same standard instead of four.

They can't add you back

Not through a sister brand, not through a "new" list, not six months later.

Free, on every channel

Opting out never costs a peso, and the link stays live for at least 60 days.

Somewhere to complain

A named regulator, a per-day penalty, and a complaint that actually goes somewhere.

Where we are now

You already have the right. You just can't use it.

The Data Privacy Act (RA 10173) gives you the right to withdraw consent, and the National Privacy Commission says withdrawing should be as easy as giving it. That's a principle, not a standard. No required mechanism, no deadline, and nothing that happens to a company whose unsubscribe link is broken.

  • An unsubscribe link that opens a login page for an account you never made.
  • "Reply STOP" to a number that doesn't accept replies.
  • A preference center with fourteen checkboxes and a Save button that doesn't save.
  • The same sender back three weeks later under a different brand name.
  • An app that buries notification settings four screens deep, then resets them on update.
  • Nowhere to report any of it, and no consequence if you do.

Gmail and Yahoo have required one-click unsubscribe, honored in 48 hours, from any sender pushing 5,000+ messages a day since 2024. Google set a stricter rule for Filipino inboxes than Philippine law did. If you get less spam in Gmail than in your SMS, that's the reason.

The bill, in plain words

Nine clauses. No legalese.

This is the whole thing. Every clause is copied from a rule that already works somewhere else, and the source is named so nobody has to take our word for it.

Clause 1 · Scope

Who it covers

Anyone sending 500 or more commercial messages in a 30-day period to people in the Philippines, on any channel. The floor exists so a neighborhood store texting twenty regulars isn't covered.

Clause 2 · The obligation

One action, no login, no extra information, free

The opt-out must work in a single tap, click, or reply. It cannot demand an account or any detail the sender doesn't already hold. It stays live 60 days after the message is sent.

Clause 3 · The deadline

48 hours, every channel

Stricter than the 10 business days the US allows. Defensible because Gmail already enforces 48 hours, so every large sender has built it.

Clause 4 · Method

Any reasonable method counts

Clicking the link, replying STOP, flipping the in-app toggle, or writing to the published address. A sender cannot decide that only one route is the valid one.

Clause 5 · Confirmation

One confirmation message, with no marketing in it

They may confirm you're out. Once. That message carries no offer and no attempt to talk you back in.

Clause 6 · No re-adding

Consent doesn't transfer between brands

Not to a subsidiary, an affiliate, a sister company, an acquired list, or a "new" list. Opting out of one is opting out of all of them for that company.

Clause 7 · Exemptions

Receipts, OTPs, and delivery updates are untouched

So are security alerts, legally required notices, messages about a contract you're actually in, and government messages performing a public function. This bill does not ban marketing.

Clause 8 · Penalties

₱50,000 a day per complaint, rising on repeat

Detailed below. Levels sit inside existing Philippine ranges, so nothing here is an outlier a sponsor has to defend.

Clause 9 · The sleeper

The company has to prove it honored you

Senders keep an opt-out log for two years and produce it on demand. If they can't produce it, your complaint is presumed valid. This is the most effective clause in the bill and it costs the government nothing.

Enforced by the National Privacy Commission, with the NTC on the SMS channel and the DTI where the sender is a retailer. One complaint portal. Takes effect six months after publication.

The teeth

What it costs to ignore it.

A rule without a penalty is a suggestion, which is exactly what the Data Privacy Act's withdrawal principle turned out to be.

OffensePenalty
First violation ₱50,000 / day, per substantiated complaint, running from the 49th hour until the opt-out is honored. Capped at ₱2,000,000.
Repeat within 24 months Up to ₱5,000,000, plus possible suspension of the sender's authority to send bulk commercial messages.
Willful, or ordered by an officer The responsible officer is personally liable, on top of the corporate penalty.
Fake or spoofed sender ID Referred under RA 11934, which already covers it.

Why these numbers. The Data Privacy Act runs ₱500,000 to ₱5,000,000 and the SIM Registration Act runs ₱100,000 to ₱1,000,000. These sit inside both ranges, so a sponsor never has to defend an outlier. For comparison, the US CAN-SPAM Act allows roughly $53,000 per email, with no cap.

Where it comes from

We didn't invent any of this.

Three regimes already solve this problem. The bill takes the strongest clause from each, which is also the answer to "has this been tested anywhere?"

US CAN-SPAM Act

Opt-out in every commercial email, live 30+ days, honored in 10 business days, no extra information, no fee. Up to ~$53,000 per email, no cap.

We take: no-extra-information, and the per-message penalty. 2003, FTC-enforced.

US FCC consent order

Consent can be revoked "in any reasonable manner." Honored within 10 business days. Senders limited to one confirmation text, with no marketing in it.

We take: any-reasonable-method, and the one-confirmation cap. Effective April 2025.

Gmail and Yahoo rules

RFC 8058 one-click unsubscribe, honored within 48 hours, required of any sender pushing 5,000+ messages a day.

We take: the one-click standard and the 48-hour clock. In force since 2024.

The one place we go further than the US. We use Gmail's 48 hours instead of CAN-SPAM's 10 business days. Any sender big enough to be covered already built this in 2024 to keep reaching Gmail inboxes. The bill asks them to apply it to Filipinos on every channel, not only the one Google polices.

Who we're aiming at

24 senators, not 300 congressmen.

Senators are elected nationally, so every signer anywhere in the country is a constituent of all 24. That removes the hardest part of a House campaign, which is proving numbers inside one specific district, and it means one packet delivered 24 times instead of a per-district breakdown nobody has time to read.

This bill can start in the Senate. Only appropriation, revenue, and tariff bills must originate in the House, and this is none of those.

Your city and province still matter. For a nationally elected senator the persuasive number isn't a district count, it's geographic spread. Two thousand signatures from 60 provinces is a national mandate. Two thousand from Metro Manila is a Metro Manila complaint.

What each senator's office receivesUpdated weekly
  1. The bill above, plus a formal legislative draft and explanatory note, ready to file with minimal editing.
  2. The signature list, with a province-by-province spread showing how national the support is.
  3. Registered-voter count, self-declared, reported as its own number. We don't inflate one into the other.
  4. Verification note stating every signature confirmed a real email before counting, with the duplicate and bounce rate disclosed.
  5. Signer comments, the section below, forwarded in full. The personal accounts are the part that survives a committee hearing.
  6. One-page cover memo: the ask, the cost to government, the affected sectors.

Any senator, any party, is welcome to file it. No exclusivity, nobody is charged, and the first office to say yes gets it.

Spread it

One share is worth more than one signature.

Senators are elected nationally, so the number that persuades is how many provinces signed. Sending this to one person outside your city does more than signing it twice.

Copy worth stealing

Gmail has forced one-click unsubscribe on bulk senders since 2024. Philippine law still doesn't. There's a bill for it now, nine plain-language clauses, and it's going to the Senate. Takes 20 seconds to sign.

No tracking pixels on these buttons. They're plain links, which means we can't tell who shared what, which is a fair trade for not being the thing this bill is against.

Have your say

You can't edit the bill. You can put something on the record.

The text above is frozen at v1.0. If everyone could edit it, no senator would ever be holding the same document twice, and there would be nothing to sign. So the bill gets versions and your comments ride alongside it. When enough comments push the same way, the bill becomes v1.1 and the comments that changed it are attached to the new version.

Every comment goes to the Senate. Not a summary, not a count. The full text, with the signer's city and province, in the same packet as the signature list. Personal accounts of being unable to opt out are the part that survives a committee hearing, so specifics beat agreement.

0 comments on v1.0

Signers only
Sample comment Cebu City, Cebu My story

This is what a signer comment looks like once the database is wired. Comments are published after a moderation pass, tagged by type, and sortable by votes so the concerns that matter most to the most people rise to the top of the packet.

on v1.0

Add a comment

Sign the petition first, then use the link in your confirmation email. That way every comment sits behind a verified signature, which is what makes them worth forwarding.

Comments are moderated before they appear. We remove abuse, spam, and anything that names a private individual. We don't remove comments for disagreeing with the bill, and the ones that disagree get forwarded too.

After you sign

What happens next.

Confirm your email

One link, one tap. Your signature counts the moment you click it, and the same email carries your comment link.

Send it to one person outside your city

Spread is the number that persuades a nationally elected senator. One friend in a province we haven't reached is worth more than ten in yours.

We start knocking at 1,000

The goals climb in steps because a single distant number is discouraging and we'd rather be honest. At roughly 1,000 verified signatures across 40 provinces, an office will take a meeting. That's when the first approach happens, not at the end.

Changed your mind?

Withdrawing takes one click.

Every email from us has a withdraw link at the bottom. Click it and you're out: off the list, out of the count, and your comments come down. No login, no form, no "are you sure," and no reason required. Done within 48 hours, the same standard this bill asks of everyone else.

Lost the email?

Enter your reference number and the email you signed with. We'll send a fresh withdraw link to that address. We don't withdraw on the spot, so nobody can remove you just by knowing your reference number.

Lost both? Write to privacy@boses.migmol.com from the address you signed with.