Data breach log
A record of personal-data breaches. The obligation to keep this sits on you as the data fiduciary regardless of who actually processed the data, and the log has to exist even when it is empty.
Find it under Workspace › Settings in the sidebar, at /breach-log.
What the screen tells you
2 notifications past the 72-hour deadline and not recorded as sent.
Whose obligation this isThe obligation is on the employer as data fiduciary. Payroll bureaux, background-check vendors, insurers and benefits platforms are processors under written contract; when one of them loses employee data, it is still your breach to notify.
The 72-hour clockThe detailed notice to the Data Protection Board and the notice to the affected people are both due within 72 hours of your becoming aware. The clock runs from detection, not from the incident: finding out three weeks late does not make you three weeks late.
The detailed notice to the Data Protection Board and the notice to the affected people are both due within 72 hours of your becoming aware. The clock runs from detection, not from the incident: finding out three weeks late does not make you three weeks late.
What you can do here
- Log a breach
- Amend
- What happened, and what was done
- Cancel
- Save the entry