Breach: should the Information Commission be told?
Screening Data protectionA 72-hour screen for a personal data breach: does it meet the risk threshold for notifying the regulator, and what must the notification contain?
Result: Tick the items that apply.
Where this applies
Sources
- Primary UK GDPR (Regulation (EU) 2016/679 as it applies in the UK) legislation.gov.uk
- Primary PECR regulation 5A legislation.gov.uk
- Regulator Security breaches (Guide to PECR) Information Commission (ICO guidance)