Data Privacy Act Breach Notification in the Philippines
Understanding Privacy Breach Notification in Philippine Healthcare
Under the Data Privacy Act of 2012, Philippine organisations must notify the National Privacy Commission and affected individuals of personal data breaches. Healthcare providers, given the sensitive nature of health information, must be particularly vigilant about breach detection and response.
When Notification is Required
The NPC must be notified of breaches that may involve sensitive personal information, are likely to affect more than 100 individuals, or involve information that may be used to facilitate identity fraud. Healthcare data breaches typically require notification.
Steps to Take
When a breach occurs, contain the breach immediately, assess the scope, notify the NPC and affected individuals if required, and review security measures. Trucell helps healthcare providers implement security measures that prevent breaches.