10: Handling Data Breaches

One of the most far-reaching aspects of the EU’s new data protection regulation concerns the management of data security breaches.

From May 25th when the General Data Protection Regulation (GDPR) comes into force, all organisations will have a duty to report certain types of personal data breaches to the Information Commissioner’s Office (ICO). That’s the independent body that will enforce the GDPR in the UK.

That report must be made within 72 hours of a security breach being discovered.

As 3C Consultants’ Managing Director Colin Sales explains in this short video, it’s imperative that your organisation puts procedures in place now to detect, report and investigate personal data breaches.

Failure to comply will not only damage your organisation’s credibility and reputation but also expose the business to the risk of sanctions or fines from the ICO.