Data breaches

Record of security incidents that affect personal data (loss, unauthorised access, leak…).

Each breach

• Date and Description of the incident.
• Affected data and number of data subjects.
• Severity and measures taken.
• Notified to the CNPD? and to the data subjects?

Step by step

1. GDPR → Breaches tab.
2. + Breach → describe the incident and the affected data.
3. Record the measures and the notification status.

The 72-hour deadline

A risk breach must be notified to the CNPD within 72 hours. If there is a high risk, the data subjects must also be informed.

➡️ Next: Data Subject Portal · back to GDPR.

---