DataGuidance confirmed, on 19 November 2018, with Mario Flor, Partner at Flor & Hurtado Law Firm, that the Technical Standard to Coordinate the Management of Incidents and Vulnerabilities that Affect the Security of Telecommunications Networks and Services ('the Technical Standard'), enacted by the Agency for the Regulation and Control of Telecommunications ('ARCOTEL'), is currently in force. Moreover, ARCOTEL released, on 23 October 2018, guidance and forms for the application of the Technical Standard for consultation.

Flor highlighted, "The Technical Standard's purpose is to establish criteria and coordination mechanisms for telecommunications service providers to enforce the corresponding measures for the management of vulnerabilities and computer incidents, to preserve the security of their services and reduce the risks of vulnerability of the network, in order to safeguard the secrecy of communications and the information transmitted by their networks. In general terms, it establishes a traffick light protocol to manage breach notifications from users."

Flor added, "The Technical Standard also establishes a mandatory security protocol [...] which requires all telecommunications service providers to establish procedures related to vulnerabilities and incidents, [including] registration, prioritisation, analysis, escalation and management; provide information related to IP addresses that are assigned to clients or internal network; and to appoint a security manager responsible for coordinating with ARCOTEL on the application of the Technical Standard's provisions."

You can read the press release, only available in Spanish, here.