Any entity managing personal data must inform PRODHAB and affected data subjects about any breach of personal information (such as loss, destruction, or misplacement), within five business days after the time of the breach.

The notification to PRODHAB and data subjects must at least include the following information:

• Nature of the breach;
• Personal data compromised by the breach;
• Immediate corrective actions taken by the entity;
• Other preventive and corrective actions that will be taken;
• Contact information to obtain further information.

Failure to provide notice within the required timeframe may result in a potential fine to be enforced by PRODHAB.