Question Yes No Comments/Remedial Action Data Breach response Does the organisation have a documented obligations (Article 33 privacy and security incident response and 34 and further plan? guidance available ) Are plans and procedures regularly reviewed? Are procedures in place to notify the office of the Data Protection Commissioner of a data breach? Are there procedures in place to notify data subjects of a data breach (where applicable)? Are all data breaches fully documented? Are there cooperation procedures in place between data controllers, suppliers and other partners to deal with data breaches?
Question Yes No Comments/Remedial Action Data Breach response obligations (Article 33 and 34 and further guidance available ) Does the organisation have a documented privacy and security incident response plan? Are plans and procedures regularly reviewed? Are procedures in place to notify the office of the Data Protection Commissioner of a data breach? Are there procedures in place to notify data subjects of a data breach (where applicable)? Are all data breaches fully documented? Are there cooperation procedures in place between data controllers, suppliers and other partners to deal with data breaches?
1.Template-Data-Inventory-Clubs-with-Check-List.docx