Organisations are required to report specific incidents that occur, such as a personal data breach, to the ICO. Compliance Compendium provides a tool to customers to use in the event of such a breach, or any issue leading to the loss or abuse of private discernible information.
Not all personal data breaches need to be reported under the DPA of 25 May 2018; if it is not possible for the breach to pose a threat to someone you need not report it. However if the breach poses a threat to any person’s rights or freedoms, the ISO must be notified. A personal data breach includes the unintentional, intentional or illegal damage, loss, modification, exposure of, or entree to personal data. A personal breach is not just the loss of personal data, it is much more. The Privacy and Electronic Communications Regulations (PECR) states that associations who provide a service to their clientele, which allows them to send electronic messages, must report any and all breaches of personal data under the PECR.
This is then where Compliance Compendium takes the stage. CC provides a dynamic Data Breach Tool, which can be carefully and securely assimilated into an association’s system(s). The CC Data Breach Tool is extremely powerful and useful in the event of a breach or a ransomware attack, as it provides management, or the breach management team, with ready-to-use templates. These templates are used to inform clientele about the breach, as well as report to the ICO.
Wish to know more about our products? Click here for CCSuite