On 1 November 2025, the Minister of Communications and Information Technology adopted the Executive Regulations of the Personal Data Protection Law issued by Law No. 151 of 2020 through Ministerial Decision No. 816 of 2025. The Executive Regulations assign governance obligations to the Personal Data Protection Center (PDPC) in cases of personal data breach or violation. They require the PDPC to make available communication methods and channels for reporting breaches or violations of personal data and to establish a dedicated communication method for reports related to national security considerations. They require the PDPC to coordinate with national security authorities to determine the mechanism for handling and notifying ongoing reports concerning personal data breaches or violations. They also require the PDPC to conduct regular training and awareness activities for personal data protection officials and to apply standardised criteria to classify the nature of personal data breaches or violations.
Original source