QuestionQ41

VerifiedPrivacy Risk Management and Compliance

An employee mistakenly sends an email containing personal data to the incorrect recipient. What should the employee do FIRST once they become aware of the problem?

Explanation

An unintended disclosure of personal data may constitute a personal data breach and should be promptly escalated through the organisation’s internal breach-reporting process to the data privacy officer. The organisation must assess the incident and risk before deciding whether notification to the regulator or affected individuals is required; not every breach requires those external notifications. ICO: Personal data breaches—a guide

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!