Can the National Privacy Commission authorize the delay of a mandatory breach notification?
The Commission may legally authorize the postponement of a breach notification if it would actively hinder the progress of a criminal investigation.
What details must be included in a breach report submitted to the Commission?
A breach report must contain the required notification contents along with the specific name and contact details of the controller’s designated representative.
What details must be included in a breach report submitted to the Commission? Read More »
Are organizations required to strictly document all security incidents, even minor ones?
All security incidents, including those not strictly requiring formal notification, must be rigorously documented internally through comprehensive written or aggregated reports.
Are organizations required to strictly document all security incidents, even minor ones? Read More »
What is the specific penalty for unauthorized access or intentionally breaking into a data system?
Intentionally breaking into systems containing personal data is severely punished by 1 to 3 years imprisonment and hefty criminal fines.
How is the concealment of a security breach legally penalized?
Intentionally concealing a known security breach brings a harsh penalty of 1.5 to 5 years imprisonment and severe financial fines.
How is the concealment of a security breach legally penalized? Read More »
How does the Data Privacy Act define the processing of personal information?
Processing involves any operation performed on personal data, including its collection, recording, organization, storage, modification, use, erasure, or final destruction.
How does the Data Privacy Act define the processing of personal information? Read More »
What is considered a filing system under the Data Privacy Act?
A filing system is a structured set of information relating to individuals that makes specific personal data readily accessible to users.
What is considered a filing system under the Data Privacy Act? Read More »
How is an information and communications system defined?
It is a system involving computer networks and procedures for generating, sending, receiving, storing, or processing electronic data and messages.
How is an information and communications system defined? Read More »
Is encryption a required technical security measure under the rules?
Entities should utilize the encryption of personal data during active storage and transit, alongside robust authentication processes, to limit unauthorized access.
Is encryption a required technical security measure under the rules? Read More »
What is the exact penalty for improperly disposing of regular personal information?
Improperly discarding personal information in public areas or trash containers brings 6 months to 2 years imprisonment and substantial criminal fines.
What is the exact penalty for improperly disposing of regular personal information? Read More »
