When something goes wrong

What it’s for

The breach rules have no minor-incident exemption, and the duty stays yours even when the breach happened at a Data Processor you use. The register holds the facts both Board filings need and works out when the detailed report is due; the two notices are written from it.

What you fill in

1. 1

   Breach register workbook

   Two tabs: Instructions and Breach Register. It holds the facts both Board filings need, and works out when the detailed report is due.

2. 2

   Notice to the Board

   A Word notice in two parts: Part A without delay, Part B within 72 hours.

3. 3

   Letter to the people affected

   A plain-language Word letter to each affected person, without delay.

From the video

Two frames from the walkthrough. The worked example is a fictional online store.

Basis Act s.8(6); Rule 7(1); Rule 7(2); Act Schedule, Sl. 1 and 2. How we arrived here