NPC Rolls-out Breach Notification And Registration Platforms

On April 20, 2022, the NPC launched its Data Breach Notification and Management System (DBNMS) which it hailed as "a user-friendly interface that facilitates easy tracking and faster submission of Personal Data Breach Notifications (PDBNs) and Annual Security Incident Reports (ASIRs)" in accordance with NPC Circular No. 16-03.

Data Breach Notification and Management System

The DBNMS provides for an assessment aid for PICs and PIPs to determine whether they are subject to mandatory data breach notification.

/p>

The main functionality of the DBNMS is to facilitate the submission of PDBNs.

ASIRs should also be submitted through the DBNMS.

Considering the accessibility of the platform, PICs and PIPs must submit ASIR, even for nil reporting. The presumption that there is no security incident to report that previously arose from non-submission of the ASIR no longer applies. The deadline for the submission of ASIRs for the years 2018 to 2021 is on