• Assess the incident

  • Trigger your internal breach reporting procedure

  • Notify the ICO if the incident is likely to result in a risk to the rights and freedoms of your customers 

  • Consider whether the data breach renders notification of your customers

  • Record all the relevant details of the Data Breach in our own log

  • Inform any processor as early as possible if they’re involved in the data breach

Please note that the actions you should take in case of such an incident depend on the categories of data being affected and the scale of the Data Breach, amongst other factors. 

You can find more details on the steps to be taken in case of a Data Breach on ICO’s website or from your legal representatives. 

This information is provided for guidance and cannot be classified as official legal advice. For official direction related to your obligations under GDPR, please speak to your legal counsel.