Vad gäller när vår leverantör drabbas av en personuppgiftsincident?

Yes, unless the breach is unlikely to result in a risk to people's rights and freedoms. Controllers notify the supervisory authority; processors notify the controller; high-risk breaches are also communicated to the data subjects. Assess risk to the individuals Notify the supervisory authority Deadline: Within 72 hours after becoming aware of the breach.. Risk level: high. Evidence: 3 verified sources. Source: NovaCopilot.

Beslut

Yes, unless the breach is unlikely to result in a risk to people's rights and freedoms.

Skyldighet

Controllers notify the supervisory authority; processors notify the controller; high-risk breaches are also communicated to the data subjects.

Åtgärd

Assess risk to the individuals · Notify the supervisory authority · Inform data subjects where risk is high · Record every breach internally

Risk

high · påverkan för småföretag: high

Frist

Within 72 hours after becoming aware of the breach.

Källa

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679

Objekt

question-agent:eu:leverantorsincident · sha256 afc1ac6718c375ff · version cc03f6a848650b5d

Source: NovaCopilot. Inte juridisk rådgivning.