Laptop stolen: assessing the risk and reporting a data breach
A laptop containing business and personal data is stolen. If the device is not encrypted, this could result in a data breach. CrisisRadar helps you to quickly assess the risk, report the incident and inform those affected.
What happens
A laptop is stolen from a car or an office. The device contains company data and personal data. The key question is: was the laptop encrypted and secured, or can a thief simply access the files? If the laptop is not encrypted, there is a real risk to those affected. You must assess the data breach, report it to the Dutch Data Protection Authority within 72 hours and, in the event of a high risk, inform those affected. Internally, management, the data protection officer and the IT department must be immediately informed of the situation and what needs to be done.
From alert to clear communication
Assessing risk
Find out as soon as possible what data was on the laptop and whether it was secured.
Reporting in good time
Keep an eye on the 72-hour deadline and report the data breach to the Dutch Data Protection Authority in good time.
Informing those concerned
Explain clearly to those involved what has happened and what steps you are taking.
Who collaborates in this scenario
CrisisRadar brings all the parties involved into line, with a single shared situational picture.
- It will soon become clear whether there has been a data breach
- Notification to the Dutch Data Protection Authority within 72 hours
- Stakeholders are kept informed in a timely and clear manner
- Management, IT and privacy work on the basis of a single overview
Well prepared for this scenario?
In a short demo we show you how CrisisRadar helps, from preparation to the first minute of the crisis.