GDPR Glossary Also known as: data breach
A security incident that leads to loss, unauthorised access to, or disclosure of personal data.
A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data — not just hacks, but lost laptops and mis-sent emails too.
Breaches that risk people's rights must be notified to the supervisory authority within 72 hours, and high-risk breaches must also be communicated to the individuals affected.
In the Regulation
Related terms
Need this applied to your business?
The articles and FAQs turn GDPR terms into working knowledge.