What specific information must a complete data breach notification formally contain?

The formal breach notification must be highly comprehensive and at least explicitly describe the exact technological or physical nature of the unfortunate security breach. It must carefully list the specific types of sensitive personal data possibly involved and the immediate mitigating measures taken by the entity to permanently address the vulnerability. Additionally, the notification must clearly identify the designated representatives of the controller from whom the data subject can safely obtain additional details and assistance. These essential reporting contents are strictly outlined in Section 39 IRR. “Section 39. Contents of Notification. The notification shall at least describe the nature of the breach, the personal data possibly involved, and the measures taken by the entity to address the breach. The notification shall also include measures taken to reduce the harm or negative consequences of the breach, the representatives of the personal information controller… and any assistance to be provided to the affected data subjects.” 20-May-26

About Nicolas and De Vega Law Offices

 Nicolas and De Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com/.