Lost USB stick: assessing and reporting a data breach
An employee loses a USB stick containing personal data. This constitutes a data breach. CrisisRadar helps you to quickly assess the risk, inform the relevant people and report the incident to the Dutch Data Protection Authority in good time.
Wat er gebeurt
An employee loses a USB stick whilst out and about. The stick contains files with names, addresses and other personal data. No one knows whether the stick was encrypted or whether it has fallen into the wrong hands. Time is of the essence now. You must assess the level of risk to those affected. If the risk is high, you must inform them. And if it is a data breach, you must report this to the Dutch Data Protection Authority within 72 hours. Internally, management, the data protection officer and the relevant teams must be notified immediately.
Van melding tot heldere communicatie
Assessing risk
Quickly identify what data has been lost and how great the risk to people is.
Report it in good time
Keep an eye on the 72-hour deadline and report the data breach to the Dutch Data Protection Authority in good time.
Informing those concerned
Provide those affected with clear information about what has happened and what they can do themselves.
Wie samenwerkt in dit scenario
CrisisRadar brengt alle betrokken partijen op één lijn, met één gedeeld crisisbeeld.
- Quickly assess the risk posed by the data breach
- Notification to the Dutch Data Protection Authority within 72 hours
- Those concerned are informed clearly and in good time
- Everyone within the organisation works on the basis of the same understanding
Goed voorbereid op dit scenario?
In een korte demo laten we zien hoe CrisisRadar u helpt — van voorbereiding tot de eerste minuut van de crisis.