1. Personal data breach notification Be prepared!
Can you detect and identify a personal data breach?
Are you clear when, what and to whom you need to notify?
Do you have a breach response plan in place?

2. Remember
It’s not just about reporting a breach
You need to contain the breach and attempt to mitigate its negative effects

3. Breach management 5 key steps
Contain the breach
Assess the risks to individuals
Notify the ICO, if necessary
Inform affected individuals as well, if required
Evaluate and prevent a repeat

4. Lorem ipsum dolore sit amet
MYTH: All details need to be provided as soon as a personal data breach occurs!
MYTH: All personal data breaches will need to be reported to the ICO!
Lorem ipsum dolore sit amet
Subtitle can go here
When you have inserted a picture, click the picture, go to format (top menu bar), click, then click ‘send backwards’ until the picture is at the back of the speech bubble.
If you do not want a picture click text ‘click icon to add picture’ and delete or send backwards so you can edit the text in speech bubble.
MYTH: If you don’t report in time a fine will always be issued and the fine will be huge!
MYTH: Personal data breach reporting is all about punishing organisations!

5. Assessing risk
Do you have a process in place to assess the likelihood and severity of the risk to individuals’ rights and freedoms?
Think of the consequences… what are the potential effects of a breach on individuals; how severe are these, and how likely are they to happen?