← Back home
What this can look like in practice
- A customer database accessed without authorisation
- Personal data accidentally emailed to the wrong person
- Loss of access to personal data
- Unauthorised sharing of customer information
- Compromise of systems containing personal data
Your first response matters
A basic breach response process should cover:
Detect — identify what happened.
Contain — limit further exposure.
Assess — understand what data and which individuals are affected.
Document — record the incident and your response.
Notify — follow the applicable notification requirements and prescribed procedure.
Remediate — address the underlying cause.
Review — improve controls to reduce the chance it happens again.
This is a general framework, not a substitute for an actual incident response plan tailored to your systems and obligations.