Philippines: Deadlines for submission of Annual Security Incident Reports set by the National Privacy Commission

The Nationwide Privateness Fee lately introduced that the deadline for the submission of Annual Safety Incident Studies for the years 2018 to 2021 is on 31 October 2022, whereas the deadline to submit the 2022 model of mentioned report is on 31 March 2023.

In short

Via its official web site bulletin, the Nationwide Privateness Fee (NPC) formally introduced the deadlines for submission of the Annual Safety Incident Studies (ASIRs). In accordance with the NPC, ASIRs for the years 2018 to 2021 are due on 31 October 2022, whereas ASIRs for 2022 should be submitted inside the interval of 1 January 2023 to 31 March 2023.

ASIRs should comprise the next data:

• Abstract of the variety of safety incidents¹ encountered in a specific calendar 12 months and categorized by sort, i.e., theft, id fraud, sabotage/bodily injury, malicious code, hacking, misuse of assets, {hardware} failure, software program failure, communication failure, pure catastrophe, design error, person error, operations error, software program upkeep error, third-party service, and different analogous causes
• Abstract of the variety of private information breaches² encountered in a specific calendar 12 months and categorized based mostly on the appliance of the breach notification obligations, i.e., necessary and voluntary notification

For this objective, ASIRs should be filed through the NPC’s Information Breach Notification Administration System (DBNMS), because the NPC not accepts ASIR submissions through electronic mail, private submitting, or courier/postal supply. Be taught extra concerning the DBNMS by studying our latest shopper alert on the matter, which is out there right here.

Shoppers are urged to organize their respective ASIRs (protecting the years 2018 to 2021) in an effort to guarantee well timed submission to the NPC by 31 October 2022. We additionally suggest commencing preparations for the submission of the 2022 ASIR, because the interval for submission of the identical runs from 1 January 2023 to 31 March 2023.

Failure to submit the ASIR is a violation of NPC issuances, which can be considered by the NPC on whether or not a private data controller (PIC) or private data processor (PIP) could also be topic to a compliance test by the NPC. The NPC’s analysis or examination of a PIC or PIP’s compliance with the necessities of the Information Privateness Act of 2012, its Implementing Guidelines and Rules, and NPC issuances embody privateness sweeps, paperwork submission, and on-site visits.

1 ‘Safety incident’ is an occasion or prevalence that impacts or tends to have an effect on information safety, or might compromise the supply, integrity, and confidentiality of private information. It shall embody incidents that will consequence to a private information breach if not for safeguards which were put in place.
2 ‘Private information breach’ refers to a breach of safety resulting in the unintended or illegal destruction, loss, alteration, unauthorized disclosure of, or entry to, private information transmitted, saved, or in any other case processed. A private information breach could also be within the nature of:
(a) An availability breach ensuing from loss, unintended or illegal destruction of private information
(b) An integrity breach ensuing from alteration of private information
(c) A confidentiality breach ensuing from the unauthorized disclosure of or entry to non-public information

Please contact [email protected] for inquiries.

VISIT QUISUMBING TORRES SITE