NPC Circular 16-03: Personal Data Breach Management and Data Subject Rights

Summary

NPC Circular No. 16-03 covers personal-data breach management, including breach notification timelines, mandatory contents of breach reports, and the rights of affected data subjects. It is paired in complaint practice with NPC Circular 16-01 (security measures) and NPC Advisory 17-01 (DPO designation) as the operational core of personal-information-controller obligations under RA 10173.