Inside GRC Flow
Services
Projects
Encyclopedia
FAQ
Contact

Feedback Sign in Get started

Inside GRC Flow
Services
Projects
Encyclopedia
FAQ
Contact
Share feedback
Sign in

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

Inside GRC Flow
Services
Projects
Encyclopedia
FAQ
Contact
About

Frameworks

ISO/IEC 27001
GDPR
NIS2
DORA
HIPAA
PCI DSS

Legal

Terms
Privacy
Legal notice

© GRC Flow

Personal data breach notification procedure template

Inside GRC Flow
Services
Projects
Encyclopedia
FAQ
Contact

Procedure template

Personal data breach notification procedure template

The 5 steps of this procedure, as the template writes them. You adapt them to your company, then approve and download the document.

Create this procedure

The steps

Record the breach as soon as it is known: what data, how many people, since when.
Assess the risk to the people concerned with the data protection lead.
Notify the supervisory authority within 72 hours unless the risk is unlikely (GDPR art. 33).
Inform the people concerned without delay when the risk is high (GDPR art. 34).
Record every breach, notified or not, in the breach register.

Guides

GDPR data breach: what to do within 72 hours

Other procedure templates

Access management (joiners, movers, leavers) procedure
Backup and restore procedure
Change management procedure
Vulnerability and patch management procedure
Supplier onboarding and review procedure
Business continuity and disaster recovery procedure