A breach report must contain the required notification contents along with the specific name and contact details of the controller’s designated representative.
What details must be included in a breach report submitted to the Commission? Read More »
All security incidents, including those not strictly requiring formal notification, must be rigorously documented internally through comprehensive written or aggregated reports.
Are organizations required to strictly document all security incidents, even minor ones? Read More »
Intentionally breaking into systems containing personal data is severely punished by 1 to 3 years imprisonment and hefty criminal fines.
Processing involves any operation performed on personal data, including its collection, recording, organization, storage, modification, use, erasure, or final destruction.
How does the Data Privacy Act define the processing of personal information? Read More »
A filing system is a structured set of information relating to individuals that makes specific personal data readily accessible to users.
What is considered a filing system under the Data Privacy Act? Read More »
It is a system involving computer networks and procedures for generating, sending, receiving, storing, or processing electronic data and messages.
How is an information and communications system defined? Read More »
A personal information processor is a natural or juridical person to whom a controller securely outsources the processing of personal data.
Who qualifies as a personal information processor under the law? Read More »
Government data sharing for public functions requires a formal agreement, adequate security safeguards, and is subject to strict Commission review.
What are the requirements for data sharing between government agencies? Read More »
Data processed for public benefit research is exempted, but only strictly to the minimum extent necessary and subject to ethical standards.
Is personal data processed for public benefit research exempted from the law? Read More »
Information necessary for banks and financial institutions to officially comply with the Anti-Money Laundering Act is specifically exempted from the Act.
