Personal data breach notification Be prepared! Can you detect and identify a personal data breach? Are you clear when, what and to whom you need to notify? Do you have a breach response plan in place?

Remember It’s not just about reporting a breach You need to contain the breach and attempt to mitigate its negative effects

Breach management 5 key steps Contain the breach Assess the risks to individuals Notify the ICO, if necessary Inform affected individuals as well, if required Evaluate and prevent a repeat

Lorem ipsum dolore sit amet MYTH: All details need to be provided as soon as a personal data breach occurs! MYTH: All personal data breaches will need to be reported to the ICO! Lorem ipsum dolore sit amet Subtitle can go here When you have inserted a picture, click the picture, go to format (top menu bar), click, then click ‘send backwards’ until the picture is at the back of the speech bubble. If you do not want a picture click text ‘click icon to add picture’ and delete or send backwards so you can edit the text in speech bubble. MYTH: If you don’t report in time a fine will always be issued and the fine will be huge! MYTH: Personal data breach reporting is all about punishing organisations!

Assessing risk Do you have a process in place to assess the likelihood and severity of the risk to individuals’ rights and freedoms? Think of the consequences… what are the potential effects of a breach on individuals; how severe are these, and how likely are they to happen?