Måste vi rapportera en personuppgiftsincident?

Yes, unless the breach is unlikely to result in a risk to people's rights and freedoms. Controllers notify the supervisory authority; processors notify the controller; high-risk breaches are also communicated to the data subjects. Assess risk to the individuals Notify the supervisory authority Deadline: Within 72 hours after becoming aware of the breach.. Risk level: high. Evidence: 5 verified sources. Source: NovaCopilot.

Beslut

Yes, unless the breach is unlikely to result in a risk to people's rights and freedoms.

Skyldighet

Controllers notify the supervisory authority; processors notify the controller; high-risk breaches are also communicated to the data subjects.

Åtgärd

Assess risk to the individuals · Notify the supervisory authority · Inform data subjects where risk is high · Record every breach internally · Log every breach · Notify the supervisory authority within 72 hours unless unlikely to result in a risk

Risk

high · påverkan för småföretag: critical

Frist

Within 72 hours after becoming aware of the breach.

Källa

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 · https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_33 · https://eur-lex.europa.eu/eli/reg/2016/679/oj#art_34

Objekt

question-agent:eu:rapportera-personuppgiftsincident · sha256 302be1b4b25a50b3 · version caf95235cbd7e98d

Source: NovaCopilot. Inte juridisk rådgivning.