Notify a personal data breach
Security and data protection: Notify a personal data breach. Starts when: Breach assessed. Steps: Assess risk; Notify ICO within 72 hours; Notify customers if high risk; Record. Done when: ICO notification reference is receipted within 72 hours. Rules that apply: UK GDPR Art 33 and 34.