DATA BREACH MANAGEMENT PROGRAM
A data breach happens when there is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed. There are three kinds of data breaches:
- Availability breach – when there is a loss accidental or unlawful destruction of personal data;
- Integrity breach – when there unauthorized alteration of personal data; and
- Confidentiality breach – when there is unauthorized disclosure of or access to personal data.
The National Privacy Commission, under NPC Circular 16-03 requires organization to formulate and implement Security Incident Management Policy, create a Breach Response Team, submit Annual Reports of breach incidents, and notify when a breach occurs.