GDPR Course Modules
1
2
3
4
5
6
7

Data Breaches and Reporting

This module explains what constitutes a data breach, the steps to take if a breach occurs, and the reporting obligations under GDPR.

Duration: 5 minutes

Data Breach Response Timeline

Immediate

Identify the Breach

Determine what happened, what data was affected, and who might be impacted

Within Hours

Contain the Breach

Take immediate steps to limit the damage and prevent further data loss

Within 24 Hours

Assess the Risks

Evaluate the severity of the breach and potential impact on affected individuals

Within 72 Hours

Report the Breach

Notify the ICO and affected individuals as required by GDPR

What Constitutes a Data Breach

A data breach occurs when personal data is accidentally or unlawfully destroyed, lost, altered, disclosed, or accessed without authorization. Examples include:

  • Unauthorized access to employee records
  • Loss or theft of devices containing personal data
  • Hacking or phishing attacks
  • Accidental sharing of personal data with unauthorized parties

Reporting Obligations

Under GDPR, organizations have specific reporting obligations in the event of a data breach:

Notify the DPO

Inform your Data Protection Officer or supervisor immediately after discovering a breach

Report to the ICO

If the breach poses a risk to individuals' rights, report to the ICO within 72 hours

Inform Individuals

If the breach poses a high risk to individuals, notify them without undue delay

Previous Module Next Module

Course Modules

1. Introduction to GDPR 2. GDPR Principles 3. Individual Rights Under GDPR 4. Data Breaches and Reporting 5. Best Practices for Compliance 6. Quiz and Key Takeaways 7. Completion Certificate