Globalaw - Home
ContactMember Login
Our social network
Data Breaches: Is Your Organisation Following Reporting Best Practices?
Insights

Data Breaches: Is Your Organisation Following Reporting Best Practices?

By Globalaw APAC Data Privacy & Protection Taskforce, 04 Dec 2025

Every new and existing creation of personal data carries some risk of a possible data breach. Every organisation and data user must have clear policies and procedures for best practices in reporting data breaches and responding to data leakage incidents.

Different jurisdictions have their own criteria or laws governing how organisations should respond to data leak incidents. Most require data users to take all reasonable steps to protect personal data from unauthorized or accidental access, taking into consideration the type of data, potential harm from a breach, and measures to maintain the data's integrity for those who have access to it.

This article provides an overview of the criteria and laws applicable in Globalaw’s Asia Pacific region, including Hong Kong, India, Japan, South Korea, and Taiwan.

Hong Kong

Business operators in Hong Kong are encouraged to voluntarily report data breaches in accordance with the best practices published by the Office of the Privacy Commissioner for Personal Data (PCPD).

Currently, there are no specific criminal penalties for data breaches, although civil liabilities may arise from breaches of contract, confidentiality, and negligence.

The newly enacted Protection of Critical Infrastructures (Computer Systems) Ordinance, expecting to take effect on 1 January 2026, will require the operators of crucial infrastructures in Hong Kong in eight industries — energy, information technology, banking and financial services, air transportation, land transportation, maritime transport, healthcare services, and telecommunications and broadcasting services — to implement security plans and protocols, and report on security incidents. Failure to comply will result in fines ranging from HK$500,000 to HK$5 million.

India

India’s forthcoming Digital Personal Data Protection Act (DPDPA) requires data breaches to be reported promptly to both the Data Protection Board of India and the data principal. If data fiduciaries fail to provide such notice, they could face severe penalties of up to approximately USD 24 million.

Japan

In the event of serious data security breaches in Japan, business operators are required to notify both the Personal Information Protection Commission (JPIPC) and data subjects. The Act on the Protection of Personal Information (APPI) imposes criminal penalties for various improper handling of personal data as well as failure to comply with the JPIPC rectification requests and orders.

South Korea

For any leak of sensitive personal data in South Korea, business operators must notify the Korean Personal Information Protection Commission and the affected data subjects within 72 hours of discovering the leak. Criminal penalties apply to intentional or severe negligence (such as illegal data sales or leaks), along with administrative fines, corrective orders, potential suspension of processing, and public disclosure.

Taiwan

In Taiwan, the Personal Data Protection Act (PDPA) currently requires organisations to notify affected individuals of data breaches only after the relevant facts have been verified. Criminal penalties are imposed for intentional misconduct, with a tiered system of administrative fines for other violations. Notably, proposed amendments to the PDPA announced in March 2025 include increased reporting requirements, and business operators should closely monitor these upcoming changes.

--

This article is part of a series by our Globalaw APAC Data Privacy & Protection Taskforce members.

Globalaw’s APAC Data Privacy & Protection Taskforce comprises 15 law firms in the Asia-Pacific region with specialized expertise in advising international companies on how to implement and manage a multijurisdictional data protection program. Taskforce member firms combine a strategic, business-minded approach with cross-border collaboration to help clients build and maintain sophisticated and resilient data practices, effectively mitigate and respond to incidents, and provide sophisticated representation to resolve disputes or regulatory investigations.

Explore the Globalaw APAC Data Privacy & Protection Taskforce brochure for more information and regional contacts.

Disclaimer: The information provided in this article is for general informational purposes only and does not constitute legal advice. Information, including laws and statutes, cited are subject to change and is accurate as of 30 June 2025, but readers should verify such current status. We and our member firms shall not be held liable for any loss and/or damage incurred by any person acting as a result of the information contained in this article. Reliance on this content is at the reader’s own risk, and no attorney-client relationship is formed by reading or acting upon this article. Always seek professional legal counsel to ensure compliance with applicable laws and regulations.

Latest News

Insights
14 Mar 2026

Ireland: A Premier Legal Hub for Global Business

Ireland has established itself as one of the world’s most attractive jurisdictions for companies seeking legal certainty, efficiency, and internationally recognised dispute resolution mechanisms. Its combination of a common law foundation, EU membership, specialist courts, and growing technological capability makes it a compelling choice for international business.

A Stable, Predictable Common Law System

Ireland’s common law framework provides reliability through the doctrine of precedent, giving businesses clarity and reducing legal ambiguity. As an English-speaking jurisdiction, Ireland also offers seamless communication and a familiar legal environment for global companies.

An EU Member with Strong Cross-Border Enforceability

As part of the European Union, Ireland benefits from the supremacy of EU law and automatic EU-wide recognition of Irish judgments, with limited exceptions. The country is also a party to key international agreements, including the Lugano and Hague Conventions, thereby enhancing enforceability beyond the EU.

Efficient Courts and Cost-Competitive Litigation

Ireland offers a competitive cost regime compared with jurisdictions such as the UK and the US. The “costs follow the event” principle allows successful parties to recover fees, helping manage financial exposure.

The court structure supports efficient dispute resolution, with the High Court handling major commercial matters and the Circuit and District Courts managing lower-value disputes.

A Commercial Court Built for Speed and Complexity

Ireland’s Commercial Court is highly regarded for its expertise, strict case management, and fast-track procedures. Complex and high-value business disputes are fast-tracked, and more than 60% of cases conclude within a year. Specialist lists—such as Intellectual Property & Technology and Planning & Environment—ensure cases receive expert judicial attention.

A Modern, Streamlined Appeals Process

The Court of Appeal usually hears appeals within 3–5 months, supported by weekly case management sessions held in person and remotely. The Supreme Court focuses on cases of major public importance, processing applications quickly and listing accepted appeals without delay.

A Global Centre for Arbitration and Mediation

Ireland is a leading destination for alternative dispute resolution.

• Arbitration benefits from confidentiality, finality, the UNCITRAL Model Law, and Ireland’s status as a New York Convention signatory.

• Mediation enjoys success rates of 80% and statutory support via the Mediation Act 2017. Courts can also encourage mediation even after litigation begins.

Other ADR mechanisms, such as conciliation and adjudication, offer additional flexibility.

Innovation Driven Courts and Industry Expertise

Ireland is investing heavily in digital transformation. Legal professionals and judges possess deep expertise in sectors such as pharmaceuticals, life sciences, financial services, and technology—reflecting Ireland’s role as a global business hub.

A Supportive Restructuring Environment

Ireland’s insolvency and restructuring framework is creditor-friendly and flexible, with processes such as Examinership and the Small Company Administrative Rescue Process (SCARP) helping businesses navigate financial difficulty efficiently.

--

For more information, contact:

Image

Eamon Harrington

Partner & Head of CKT’s Healthcare and Litigation Departments

www.ckt.ie

news
24 Feb 2026

Member Spotlight: JJ Roca & Asociados, Dominican Republic

A Strategic Full-Service Firm with Regional & International Reach

Image

Founded in 1998 by Jaime Roca, JJ Roca & Asociados (ROCA) has evolved into one of the Dominican Republic’s leading full-service law firms, recognized for handling complex, high-value matters for both local enterprises and multinational corporations.

Over more than two decades, the firm has grown deliberately and strategically, building a multidisciplinary structure capable of addressing corporate, regulatory, transactional, dispute resolution, and intellectual property matters with equal depth. While mid-sized by market standards, ROCA operates with the sophistication, coordination, and technical rigor expected by international clients operating across multiple jurisdictions.

Today, the firm is trusted by global companies to navigate not only Dominican law, but to act as regional counsel navigating the broader Caribbean and Central American legal landscape.

Purpose Shapes Every Client Experience

ROCA’s culture reflects a firm where excellence is the standard, service is personal, and every client relationship is treated as a long-term partnership.

“Culture is both our identity and our strategy,” said Partner Sharin Pablo de Roca. “We define it as a commitment to excellence, lived through service, collaboration, and genuine human warmth, and as a philosophy that guides every aspect of the client experience.”

ROCA pairs technical expertise with a proactive, solutions-oriented mindset, where clients can expect clarity, responsiveness, and legal work of the highest quality, delivered by a team that understands their business and anticipates their needs.

The firm’s attorneys and staff approach each matter with diligence, integrity, and a deep sense of responsibility to clients’ goals. Responsiveness, precision, and thoughtful guidance are part of their daily discipline.

Sharin says the firm believes that exceptional client service is strengthened by how teams work internally. By fostering an environment where professionals collaborate effectively, support one another, and lead with purpose, the firm ensures that its clients receive not only strong legal representation but also a consistent, high-quality experience across all touchpoints.

A Multidisciplinary Platform Built for Complex Work

ROCA’s practice is anchored in Corporate, Litigation, and Intellectual Property, but its capabilities extend well beyond these pillars. The firm regularly advises on mergers and acquisitions, restructuring and insolvency, banking and finance, capital markets, tax, real estate, administrative and regulatory matters, competition, data protection, foreign investment, free-zone operations, immigration, energy and environmental matters, and sector-specific regulatory frameworks.

This breadth allows the firm to assemble integrated teams tailored to each matter, ensuring that clients receive coordinated advice aligned with their commercial and operational objectives.

Rather than operating in silos, ROCA’s structure enables seamless collaboration across disciplines — a critical advantage when handling cross-border transactions, regulatory strategy, or high-stakes disputes.

Trusted by Multinational and Institutional Clients

ROCA’s client portfolio reflects the confidence placed in the firm by sophisticated international companies and financial institutions.

The firm serves as regional counsel to The Coca-Cola Company and its affiliates for the management, prosecution and enforcement of their trademark portfolio across all 26 Caribbean jurisdictions, and routinely conducts regional due diligence for major marketing launches.

ROCA acts as multiregional counsel to Western Digital Technologies, Inc., managing trademark portfolios in the Dominican Republic and throughout Central America and the Caribbean, including assignments tied to global corporate reorganization strategies.

The firm acts as local counsel to Les Laboratoires Servier SAS and its subsidiary Biofarma, handling complex opposition and cancellation proceedings and expanding coordinated IP strategies beyond the Dominican Republic.

In the financial sector, ROCA represents Scotiabank in significant litigation matters, and has advised institutional investors in high-value acquisitions and restructurings.

In the restructuring space, the firm acted as local counsel to the fund led by Amzak Capital Management in the acquisition and merger of Tricom, Telecable Nacional, and affiliated companies — the first and largest restructuring of a Dominican company under Chapter 11 of the New York Bankruptcy Code.

In dispute resolution, ROCA represented Swatch AG of The Swatch Group in coordinated global trademark litigation relating to the “IWATCH” mark, aligning Dominican strategy with actions in multiple jurisdictions worldwide.

These matters reflect not only technical capability, but also the trust placed in the firm to manage sensitive, high-stakes, and cross-border work.

ROCA’s capabilities in handling complex, cross-border matters with consistency and sophistication are reflected in its recognition by Chambers, The Legal 500, IFLR, WTR, IP Stars and other leading legal directories.

Globalaw Catalyzes International Reach

Since joining Globalaw three years ago, ROCA has actively contributed to the network’s collaborative initiatives. Sharin Pablo de Roca leads the Globalaw IP Initiative, facilitating coordination among IP practitioners worldwide and strengthening cross-border relationships within the alliance. She also serves on Globalaw’s Membership Committee for the Latin American and Caribbean region.

The firm regularly collaborates with fellow Globalaw members on referrals involving corporate structuring, regulatory compliance, IP protection and strategy, franchise regulation, data protection, and contractual risk management.

As a recent example, ROCA recently advised a well-known international retail chain, introduced through the Globalaw network, on franchise regulatory requirements and the review of its franchise agreement for local compliance. Work on the corresponding trademark license agreement is underway.

“Globalaw membership is central to our ability to deliver seamless cross-border support. The collaboration, knowledge-sharing and referrals generated through the network enhance our international reach, deepen our practice capabilities, and allow us to offer clients truly global solutions with local insight,” Sharin said.

For more information, visit www.jjrocalaw.com.

news
22 Feb 2026

Chambers Guide Ranks Globalaw as a Band 1 Leading Law Firm Network for 6th Year

Globalaw, a leading network of approximately 80 independent law firms in over 60 countries, is pleased to announce it has once again been ranked as a Band 1 Leading Law Firm Network in the Chambers Global Guide for 2026. This is Globalaw’s sixth consecutive recognition. The network has also been ranked as a Leading Regional Law Firm Network in the Asia-Pacific region for the ninth year.

Image

Chambers and Partners is widely regarded as the world’s leading independent legal ranking and research organisation. Rankings are based on in-depth research and interviews with law firms, lawyers and their clients in more than 200 jurisdictions worldwide.

“Globalaw is a strategically assembled network, defined by the high-quality and integrated approach of our member firms,” said Globalaw President Peter J. Brown, Partner at Edwards, Kenny & Bray LLP in Canada. “We are proud to receive international recognition from Chambers and Partners for the network’s capacity to collaborate across jurisdictions and deliver exceptional depth and breadth of legal expertise in a comprehensive range of industries and practice areas.”

About Globalaw

Founded in 1994, Globalaw is a global band one Chambers-ranked leading network of approximately 80 independent law firms and 4,000 lawyers in over 60 countries. Our mission is to foster seamless legal collaboration among member firms and to help them deliver high-quality, cost-effective solutions to their clients worldwide. We take pride in our commitment to excellence, global reach, and innovative approach to legal services. Visit www.globalaw.net to learn more.

news
02 Feb 2026

Belgium Firm MVVP Joins Globalaw

Globalaw is pleased to announce that MVVP has joined the network!

business logo

Founded in 1995 by a group of passionate lawyers from diverse backgrounds who shared a vision of building a comprehensive, forward-thinking legal practice, MVVP has established itself as an independent, full-service law firm based in Brussels, Belgium. MVVP covers all key areas of business law, including corporate, employment, commercial, GDPR compliance, intellectual property and IT, media, real estate, and tax. Over the years, the firm's growth has been driven by strong partnerships and the integration of new talent, both internally and externally.

MVVP understands the nuances of global legal and business cultures. Operating in five languages (English, French, Dutch, German, Spanish and Italian), 50% of their work involves international clients or subsidiaries of foreign groups. They serve startups, SMEs, and multinationals across sectors such as advertising, media, technology, pharmaceuticals, and retail. The firm's work is evenly split between legal advisory (negotiations, contracts, training, regulatory compliance) and litigation (dispute resolution, arbitration, mediation), both in Belgium and at the European level. MVVP combines a personal approach, multidisciplinary expertise, and an international outlook to deliver tailored legal solutions that align with your needs and ambitions.

The firm's expertise is recognized by leading legal directories, including Chambers and The Legal 500. For more information, visit www.mvvp.be.