Document management: Review cycle: Every two years Next review due: May 2020 Policy owner Head of HR TTCT Appendix A DATA BREACH NOTIFICATION FORM When did the breach occur (or become known)? Who was involved? Who was this reported to? Date and time it was reported Date and time DPO notified A description of the nature of the breach. This must include the type of information that was lost, e.g. name, address, medical information, NI numbers. The categories of personal data affected e.g. electronic, hard copy Approximate number of data subjects affected. Approximate number of personal data records affected Name and contact details of the Data Protection Officer / GDPR Owner. Consequences of the breach. What are the potential risks? Any measures taken to address the breach. What actions and timeline have been identified? Any information relating to the data breach Appendix B BREACH MANAGEMENT FLOWCHART
Document management: Review cycle: Every two years Next review due: May 2020 Policy owner Head of HR TTCT Appendix A DATA BREACH NOTIFICATION FORM When did the breach occur (or become known)? Who was involved? Who was this reported to? Date and time it was reported Date and time DPO notified A description of the nature of the breach. This must include the type of information that was lost, e.g. name, address, medical information, NI numbers. The categories of personal data affected e.g. electronic, hard copy Approximate number of data subjects affected. Approximate number of personal data records affected Name and contact details of the Data Protection Officer / GDPR Owner. Consequences of the breach. What are the potential risks? Any measures taken to address the breach. What actions and timeline have been identified? Any information relating to the data breach Appendix B BREACH MANAGEMENT FLOWCHART
Data-Breach-Procedure-TTCT-SHS.docx