25 Apr NPC Demands Explanation from School Officials, Gov’t Agencies Hit by Breach
Last Monday, the National Privacy Commission had summoned the Personal Information Controllers of several schools and agencies whose websites were defaced and breached last April.
The NPC is demanding an explanation as to why the Personal Information Controllers (PICs) did not inform the Commission or the people affected of the breach within 72 hours of the incident.
Privacy Commissioner Raymund Liboro reiterated that under the Data Privacy Act of 2012, PICs are not only required to employ organizational, technical, and physical measures to protect personal data, but also have the duty to inform data subjects and the Commission of serious data breaches.
Source: Rappler
