This article explains how organisations should respond to data breaches in a structured and legally compliant manner. Drawing on practical experience, which shows that data breaches are becoming increasingly common and can affect any organisation, the article outlines the key obligations. It focuses in particular on the internal detection and assessment of data breaches, the documentation of the incident, any reporting obligations to supervisory authorities, and the notification of data subjects.
Publication