On 13 July 2020, the President signed Law No. 151 of 2020, Promulgating the Personal Data Protection Law. The law will come into force on 17 October 2020. The law mandates that data controllers and processors notify the Personal Data Protection Centre (PDPC) within 72 hours of discovering a breach. The notification must detail the breach, affected data types, and mitigation measures. Affected individuals must be informed within three business days. Entities must document their breach notification processes and maintain records of all data breaches.
Original source