Lost USB stick: assessing and reporting a data breach
An employee loses a USB stick containing personal data. This constitutes a data breach. CrisisRadar helps you to quickly assess the risk, inform the relevant people and report the incident to the Dutch Data Protection Authority in good time.
What happens
An employee loses a USB stick whilst out and about. The stick contains files with names, addresses and other personal data. No one knows whether the stick was encrypted or whether it has fallen into the wrong hands. Time is of the essence now. You must assess the level of risk to those affected. If the risk is high, you must inform them. And if it is a data breach, you must report this to the Dutch Data Protection Authority within 72 hours. Internally, management, the data protection officer and the relevant teams must be notified immediately.
From alert to clear communication
Assessing risk
Quickly identify what data has been lost and how great the risk to people is.
Report it in good time
Keep an eye on the 72-hour deadline and report the data breach to the Dutch Data Protection Authority in good time.
Informing those concerned
Provide those affected with clear information about what has happened and what they can do themselves.
Who collaborates in this scenario
CrisisRadar brings all the parties involved into line, with a single shared situational picture.
- Quickly assess the risk posed by the data breach
- Notification to the Dutch Data Protection Authority within 72 hours
- Those concerned are informed clearly and in good time
- Everyone within the organisation works on the basis of the same understanding
Well prepared for this scenario?
In a short demo we show you how CrisisRadar helps, from preparation to the first minute of the crisis.