NOTIFICATIONS REQUIREMENTS Division VP CDS OPC and Affected Minister’s Breach impact DGMWS Head CorpServ and/or CMP office TBS individuals May be May be Must be Low informed informed informed May be May be May be May be informed informed informed informed (within 5 Moderate working days) Must be Must be Must be High informed informed informed Must be Must be Must be Must be informed informed informed informed (NM ATIP to determine Severe timing) DGMWS Responsibility OPI NM ATIP VP CS DGMWS via CDS NM ATIP OPI and/or CMP Privacy Act Form of Verbal and/or Verbal Verbal Verbal Briefing Note Breach Report Letter notification Briefing Note by email
NOTIFICATIONS REQUIREMENTS Breach impact Division Head VP CorpServ DGMWS CDS and/or CMP Minister’s office OPC and TBS Affected individuals Low May be informed May be informed May be informed May be informed May be informed May be informed Must be informed (within 5 working days) Moderate Must be informed Must be informed High Must be informed Must be informed Must be informed Must be informed Must be informed (NM ATIP to determine timing) Severe Responsibility OPI NM ATIP VP CS DGMWS DGMWS via CDS and/or CMP NM ATIP OPI Form of notification Verbal Verbal Verbal Verbal and/or Briefing Note Briefing Note Privacy Act Breach Report by email Letter
3-EN-Privacy_breach_report_and_risk_assessment.docx