Managing a personal data breach—process flowchart
Managing a personal data breach—process flowchart

The following Risk & Compliance practice note provides comprehensive and up to date legal information covering:

  • Managing a personal data breach—process flowchart
  • Stage 1—assemble data breach team
  • Stage 2—preliminary assessment
  • Stage 3—containment and recovery
  • Stage 4—assess and record
  • Stage 5—notify the ICO (if required)
  • Stage 6—notify data subjects (if required)
  • Stage 7—notify other relevant parties
  • Stage 8—prevent future breaches

IP COMPLETION DAY: 11pm (GMT) on 31 December 2020 marks the end of the Brexit transition/implementation period entered into following the UK’s withdrawal from the EU. At this point in time (referred to in UK law as ‘IP completion day’), key transitional arrangements come to an end and significant changes begin to take effect across the UK’s legal regime. This document contains guidance on subjects impacted by these changes. Before continuing your research, see Practice Note: What does IP day mean for Risk & Compliance?

This document reflects the UK GDPR regime. References and links to the GDPR refer to the UK GDPR (Retained Regulation (EU) 2016/679) unless expressly stated otherwise.

This Practice Note illustrates how to manage a data protection breach under the General Data Protection Regulation (GDPR). It reflects reporting and recording requirements under the GDPR together with data breach management guidance issued by the Information Commissioner's Office (ICO). It also contains additional useful practical information set out in ICO guidance on data security breach management issued under the previous data protection regime, but now withdrawn. It maps out a process, providing guidance and links to relevant precedents for each stage of that process. It can also be used for cybersecurity breaches.

Click below for a PDF version of this Flowchart that you can download and print.

See Precedents: Personal data breach plan, Data breach

Popular documents