Personal data breach plan


Published by a ÀÏ˾»úÎçÒ¹¸£Àû Risk & Compliance expert
Precedents

Personal data breach plan


Published by a ÀÏ˾»úÎçÒ¹¸£Àû Risk & Compliance expert

Precedents
imgtext

    1. 1

      Introduction

      1. 1.1

        This Personal data breach plan:

        1. 1.1.1

          places obligations on staff to report actual or suspected personal data breaches; and

        1. 1.1.2

          sets out our procedure for managing and recording actual or suspected breaches.

      1. 1.2

        This plan applies to all staff[ in the UK], and to all Personal data and special category personal data held by [insert organisation’s name]. This plan supplements our policies relating to [Data protection, information security and list any other relevant policies].

      1. 1.3

        The table below explains some key terminology used in this plan:

    TermMeaning
    Personal data breachA breach of data security leading to the:
    —accidental or unlawful destruction of;
    —loss of;
    —alteration of;
    —unauthorised disclosure of; or
    —access to;
    personal data transmitted, stored or otherwise processed, eg accidental loss, destruction, theft, corruption or unauthorised disclosure of personal data.
    Personal dataInformation relating to a living individual who can be identified (directly or indirectly) from that information.
    Data subjectThe individual to whom the personal data relates.
    Special category personal data (sometimes known as sensitive personal data)Personal data revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs or trade union membership
    Genetic data
    Biometric data (where used
Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Personal data definition
What does Personal data mean?

Personal data means data relating to a living individual who can be identified from such data, either alone or with other information in the data controller’s possession. It includes opinions about, and intentions in relation to the data subject.

Read more readmore

Popular documents

UK GDPR—the basics

UK GDPR—the basicsThis Practice Note explains, in simple terms, the key features of the UK General Data Protection Regulation (UK GDPR). See also Precedent: Data protection quick reference guide.This Practice Note is intended for non-privacy specialists and there are separate, more detailed,

Public statement on data breach

Public statement on data breachStatement by [insert name of organisation] concerning a significant [cyber-attack OR data protection breach] on [insert date].On [date], we were made aware of an incident threatening the security of personal data for which we are responsible. [We OR [insert name of

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of rectification, erasure and restriction of processing, data portability, a right to object to processing and a

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects, including providing rights of access, rectification, erasure and restriction of processing, data portability, a right to object to