|
Article 19
|
(Report of and Response to Events)
- An organization shall develop an information and communication security event internal report mechanism, consisting of formal report procedures and the contact to whom such event is to be reported.
- Should an information service anomaly or information and communication security event affecting client rights and interests or normal operation occur, the Guidelines for Reporting and Responding to Securities and Futures Market Information and Communication Security Events and appropriate response procedures apply, and records shall be kept.
- An organization shall immediately report any material personal data security event occurring to it to the competent authority. Such event denotes a situation where personal data are stolen, altered, damaged, lost, or leaked, jeopardizing the organization’s normal operation or the rights and interests of a massive number of parties.
|