Legal requirement to inform regulators and affected individuals about data breaches.
Breach notification is the legal requirement to report certain data breaches to regulators and affected individuals. Under GDPR, breaches likely to risk individuals' rights must be reported to the ICO within 72 hours; high-risk breaches require individual notification. Other regulations (NIS, sector-specific) have additional notification requirements. Notification must describe the breach, likely consequences, and measures taken. Have notification templates and procedures ready.
Why It Matters
The DSC Perspective:
Breach notification deadlines are tight—72 hours requires prepared processes. Failure to notify is a compliance violation compounding the original breach. Have templates and procedures ready before breaches occur.