In today’s business environment, it is almost inevitable that an organisation will experience a security breach that exposes collected personal data to unauthorised access. Under the General Data Protection Regulation, regardless of the severity of the breach, organisations must promptly inform their EU customers and stakeholders of the incident.
Your organization may want to use the following template created by Mark W. Kaylin for TechRepublic Premium as a basis for responding to such a situation.
Selected text from the download:
GDPR compliance requires that all data subjects be notified of a security breach within 72 hours of first discovering it. Whether the notification is in the form of a public announcement, email, or text message, it must contain several key pieces of information:
The name of the organization that experienced the security breach.
The type of personal data that was exposed as a result of the security breach.
How many records were exposed?
When the security breach first occurred.
Measures taken to address the security breach.
Has the security breach been fixed?
Where data subjects can contact for further detailed information.
Improve your business operations with our three-page document. Previously $9, it's now a FREE download. Access more content with Premium Annual Subscription. Use code 25off-trp to get 25% off.
TIME SAVED: This content took five hours of dedicated writing, editing, research and design to create.