The National Privacy Commission summoned Monday the management and other responsible officials of seven schools, institutions and local government units as it investigates data breaches they sustained following an organized attack on the government and commercial organizations on April 1, 2018.
The privacy body earlier sent notice to top officials of Taguig City University, the Education Department offices in Bacoor City and Calamba City, the province of Bulacan, Philippine Carabao Center, Republic Central Colleges in Angeles City and Laguna State Polytechnic University, to confer with the commission on April 23 and 24, 2018.
NPC chairman Raymund Liboro said the summons aimed to explain why they did not notify within 72 hours of the breach the commission, nor the affected subjects, whose personal data were made available for download through links posted on Facebook.
None of the affected organizations as of Monday were able to issue any data breach notifications as part of their obligations as personal information controllers under the Data Privacy Act of 2012.