TEMPLATE TO BE CUSTOMISED BY INDIVIDUAL USER – DATA BREACH POLICY The Company take data protection breaches very seriously and this Policy sets out what we will do in the event of a data breach. We aim to protect personal data from any breach. The objective of this policy is to contain any breaches, minimise the risk associated with the breach and consider what action is necessary to secure the personal data and prevent further breaches. Status of Policy This policy does not give any contractual rights to employees and we can it at any time. What is covered? This policy relates to personal and special categories of personal data. Who does this policy apply to? This policy applies to all employees, workers (contractors, agency workers, consultants, volunteers, partners and directors (together referred to as or “Employees” “you”)). What is a breach? A data breach can include, but is not restricted to: Lost or mislaid equipment Use of inaccurate or excessive data Accidental sending of data to the wrong person Unauthorised access to, use or disclosure of data Deliberate attacks on the company systems or theft of records Breaches by the company’s service providers Failure to address an individual’s rights Breaches If you become aware of any breach, or suspected breach, you must report it to the Data Protection Lead immediately. The report should include full and accurate details of the incident, when the breach occurred (date and times), who is reporting it, if the data relates to people, the nature of the information and how many individuals are involved. What the Company will do
TEMPLATE – TO BE CUSTOMISED BY INDIVIDUAL USER DATA BREACH POLICY The Company take data protection breaches very seriously and this Policy sets out what we will do in the event of a data breach. We aim to protect personal data from any breach. The objective of this policy is to contain any breaches, minimise the risk associated with the breach and consider what action is necessary to secure the personal data and prevent further breaches. Status of Policy This policy does not give any contractual rights to employees and we can it at any time. What is covered? This policy relates to personal and special categories of personal data. Who does this policy apply to? This policy applies to all employees, workers (contractors, agency workers, consultants, volunteers, partners and directors (together referred to as “Employees” or “you”)). What is a breach? A data breach can include, but is not restricted to: Lost or mislaid equipment Use of inaccurate or excessive data Accidental sending of data to the wrong person Unauthorised access to, use or disclosure of data Deliberate attacks on the company systems or theft of records Breaches by the company’s service providers Failure to address an individual’s rights Breaches If you become aware of any breach, or suspected breach, you must report it to the Data Protection Lead immediately. The report should include full and accurate details of the incident, when the breach occurred (date and times), who is reporting it, if the data relates to people, the nature of the information and how many individuals are involved. What the Company will do
breach_policy.docx