On November 9, 2016, the NCC announced “the Regulations Governing Security Measures for Personal Information Files in Non-government Agencies Designated by NCC”, requiring private telecommunications enterprises to establish a plan for the protection of  personal information files, a mechanism to handle security breaches, and a mechanism for the preservation of relevant records and evidence.