What is Data breach?
A data breach is when personal or confidential data reaches someone who has no right to it, through an attack, a lost device or a file sent by mistake. For personal data, the law requires prompt notification.
Under GDPR a personal data breach that puts people at risk must be reported to the supervisory authority within 72 hours. Georgia's Law on Personal Data Protection also includes an incident notification duty. It all starts with an employee who knows to report an incident immediately.
How to spot it
- An email sent to the wrong recipient
- A lost laptop or phone
- A public link to a confidential file
What to do
- Report it to IT or the data protection officer immediately
- Don't hide it or try to fix it on your own
Related courses
- Data breach responseWhat counts as a breach, a plan for the first five minutes and how to report the incident.
- Incident reportingHow and when to report suspicious activity to IT, and why reporting fast is part of the defence.
- GDPR & Georgia's data protection lawWhat is and isn't personal data, the five processing principles, data subject rights and incidents.
Terms on this topic
More topics
Start with your team's risk baseline
15-30 employees, one phishing simulation and a one-page report for management. No annual commitment.