Data Protection

Personal Data Breach

Security breach affecting personal data integrity or confidentiality.

Definitions (2)

Defined as an incident involving loss, unauthorised access, acquisition, disclosure, alteration, destruction or misuse of personal data that compromises confidentiality, integrity or availability and may cause harm to data subjects; the definition triggers mandatory breach notification duties to the JPDP and, where significant harm is likely, to affected data subjects.

Any accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data that is likely to result in a risk to the rights and freedoms of natural persons; such breaches trigger obligations including SDAIA notification within 72 hours and, where likely to cause harm, direct notification to affected data subjects.