RMO No. 58-2019 — Prescribes the BIR Incident and Data Breach Response Plan Digest | Full Text | Annex A

REPUBLIC OF THE PHILIPPInES

DEPARtMEnt oF FInAnCe BUREAU OF INTERNAL REVENUE

November 20, 2019

REVENUE MEMORANDUM ORDER NO. 5 8-20/G

SUBJECT BIR Incident and Data Breach Response Plan

TO All BIR Officials, Employees and Others Concerned

In fulflling its mandate, the Bureau of Internal Revenue collects, process, and store Personally Identifiable Information (PII) about taxpayers, employees, and other

stakeholders. Under Republic Act No. 10173, known as the Data Privacy Act of 2012, all

sensitive personal information maintained by the government, its agencies and

instrumentalities shall be secured and safeguarded against any accidental loss or unlawful destruction, alteration, and disclosure, as well as against any other unlawful processing.

The importance of responding appropriately to incident or confirmed data breach is

significant to secure BIR assets and data. Thus, the development of the BIR Incident and

Data Breach Response Plan to provide guidance to all BIR officials and employees.

This Order shall take effect immediately.

asam

BUREAU OF INTERNAL REVENUE HNTTYTNT 9:30 A.M Commissioner of Internal Revenue CAESAR R. DULAY 031159

DEC 0 9 2019 M G gG W U RECORDS MGT. DIVISION