GDPR Glossary Also known as: data breach
A security incident that leads to loss, unauthorised access to, or disclosure of personal data.
A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data — not just hacks, but lost laptops and mis-sent emails too.
Breaches that risk people's rights must be notified to the supervisory authority within 72 hours, and high-risk breaches must also be communicated to the individuals affected.
In the Regulation
Related terms
Need this applied to your business?
Our data-protection lawyers turn GDPR terms into a working plan.