Each Local Government Unit (LGU) which includes Special Purpose Government Entities (SPGEs) is responsible to ensure the security of all personal data in any format or medium that is collected to conduct business and to also investigate and report any breaches of security to the proper authorities and to affected individuals.