
Data breaches are one of the worst nightmares a company can experience. It occurs when confidential information belonging to a consumer/user/data subject is stolen, leaked, altered, or disclosed to unauthorized persons from within the company’s server/system. If not properly managed it tarnishes a company’s reputation and can lead to security risks to the data subject.
Under the Data Protection Act, a company that collects, stores, and processes #personaldata must report a #databreach to the Office of the Data Protection Commissioner within 𝟳𝟮 𝗵𝗼𝘂𝗿𝘀. It must also report on the mitigation measures it has introduced to recover and protect the data of its users and to guard against future breaches.