Form for logging and reviewing details relating to a suspected or reported personal data breach.

For Data Protection / GDPR compliance it may be a requirement to document and report data breaches, depending on the significance of the breach, and this form can be used in addition to or instead of data breach register.

Form includes 3 sections;

1. Breach details and Containment action

2. Review and reporting (details of breach, responsibility, risk rating, reporting requirements and details of reporting action including dates)

3. Final review - follow up review of the breach to review and establish if further action required to prevent future breaches.

Form may be useful for compliance with ISO 27001 and general information security measures. 

[Information Classification: Business Use]