Data protection

Logging a data breach

What to do when personal information goes astray.

0:43 long

What this covers

  1. Data Breaches, then New data breach
  2. What happened, and how serious
  3. When you found out - the clock starts there
  4. Track the ICO deadline and what you did

Step by step, in writing

The same guide as the video. Tap a time to jump to that moment.

  1. 0:02

    A breach is not always a hacker

    An email to the wrong address counts. You have 72 hours from finding out to decide about the ICO.

  2. 0:05

    Open Data Breaches from the menu

  3. 0:07

    Choose New data breach

  4. 0:10

    Name the incident

  5. 0:14

    Write down what happened

    Write it while it is fresh. The ICO asks for detail, not a summary.

  6. 0:23

    Judge how serious it is

    This drives whether you have to report it and tell the people affected.

  7. 0:26

    Say where you are with it

  8. 0:30

    Set when you found out

    The 72-hour clock runs from this moment, not from when it happened.

  9. 0:35

    Save the breach record

  10. 0:39

    The clock is being tracked

    The ICO deadline is worked out for you, and the record shows what you did about it.

Previous

Handling a subject access request

Want to try this in your own hall? Everything in these guides is included in the free trial.

Start a 30-day free trial

No card needed.

All 42 video guides