Data breach
A data breach is personal or company data reaching unauthorised people; it brings both legal notification duties and a reputation crisis.
First steps
Contain the breach, establish its scope, preserve evidence, check notification deadlines and prepare a clear message for those affected.
Notification
Under the GDPR, personal data breaches must generally be reported to the regulator within 72 hours and to individuals where the risk is high.
Frequently asked questions
Does disclosing a breach hurt reputation more?
Usually the reverse; breaches hidden and later exposed cost far more trust.