Public statement on data breach


Published by a ³ÉÈËÓ°Òô Risk & Compliance expert
Precedents

Public statement on data breach


Published by a ³ÉÈËÓ°Òô Risk & Compliance expert

Precedents
imgtext

Statement by [insert name of organisation] concerning a significant [cyber-attack OR Data protection breach] on [insert date].

On [date], we were made aware of an incident threatening the security of Personal data for which we are responsible. [We OR [insert name of investigating party—eg the Metropolitan Police or the ICO]] have launched [a OR an] [criminal] investigation. We are working with forensic experts and other data security professionals to establish the origin, nature and scope of this incident.

We are conducting a thorough review of this incident. We are also working closely with [our insurer, the Information Commissioner’s Office, [insert name of any relevant professional regulator or trade body], major financial institutions and the police] to establish what happened, to contain the breach and recover the data. We have already implemented additional security measures to protect against further [data loss OR data Corruption OR unauthorised use of data].

Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Data protection definition
What does Data protection mean?

In an employment context, this refers to the obligation on an employer to protect the data of its employees and ensure that it complies with the law on how it uses the employees' data.

Read more

Popular documents

UK GDPR—the basics

UK GDPR—the basicsThis Practice Note explains, in simple terms, the key features of the UK General Data Protection Regulation (UK GDPR). See also Precedent: Data protection quick reference guide.This Practice Note is intended for non-privacy specialists and there are separate, more detailed,

Public statement on data breach

Public statement on data breachStatement by [insert name of organisation] concerning a significant [cyber-attack OR data protection breach] on [insert date].On [date], we were made aware of an incident threatening the security of personal data for which we are responsible. [We OR [insert name of

If a multinational company with entities in a number of EU states has registered a data protection

If a multinational company with entities in a number of EU states has registered a data protection officer (DPO) with the Information Commissioner’s Office (ICO), does it need to register a DPO in the other EU states where it has entities or is registration in one country sufficient?Under Article 37

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of rectification, erasure and restriction of processing, data portability, a right to object to processing and a