Report a personal data breach
Security officer, CISO and vetting officer: Report a personal data breach. Starts when: Breach confirmed. Steps: Open breach form; Assess risk; Notify ICO within 72 hours if required; Notify people if high risk; Record. Done when: The breach record shows the assessment and notification receipts with times. Rules that apply: UK GDPR Articles 33 and 34.