Section 38. Data Breach Notification.
a. The Commission and affected data subjects shall be notified by the personal information controller within seventy-two (72) hours upon knowledge of, or when there is reasonable belief by the personal information controller or personal information processor that, a personal data breach requiring notification has occurred.
Continue readingSection 43. Subcontract of Personal Data. A personal information controller may subcontract or outsource the processing of personal data: Provided, that the personal information controller shall use contractual or other reasonable means to ensure that proper safeguards are in place, to ensure the confidentiality, integrity and availability of the personal data processed, prevent its use for unauthorized purposes, and generally, comply with the requirements of the Act, these Rules, other applicable laws for processing of personal data, and other issuances of the Commission.
Continue readingSection 46. Enforcement of the Data Privacy Act. Pursuant to the mandate of the Commission to administer and implement the Act, and to ensure the compliance of personal information controllers with its obligations under the law, the Commission requires the following:
Continue readingSection 50. Accountability for Transfer of Personal Data. A personal information controller shall be responsible for any personal data under its control or custody, including information that have been outsourced or transferred to a personal information processor or a third party for processing, whether domestically or internationally, subject to cross-border arrangement and cooperation.
Continue readingSection 52. Unauthorized Processing of Personal Information and Sensitive Personal Information.
Continue reading[Terms defined under the Labor Code of the Philippines (Presidential Decree No. 442), related laws and issuances, implementing rules and regulations, and jurisprudence. New terms will be added from time to time.]
Continue readingThe Securities Regulation Code and its IRR require that every Broker Dealer shall make, keep current and maintain in its principal office the following books and records relating to its business:
Continue readingThe Securities Regulation Code requires that every Broker Dealer shall preserve for a period of not less than 5 years, the first 2 years in an easily accessible place, all books and records, including, but not limited to the following:
Continue reading[These definitions are based on Republic Act No. 7042, also known as the Foreign Investments Act of 1991, as amended by Republic Act No. 8179, as well as the Implementing Rules and Regulations of Republic Act No. 7042.]
Continue reading