Data breaches and reporting

What is a data breach?

A data breach is any unauthorised access, disclosure, or loss of sensitive information. Sensitive information can include anything from confidential business information to personal data and types of ‘special category’ data (including health and wellbeing). Any breaches which compromise personal information are classed as personal data breaches.

Data breaches can occur both on purpose and accidentally. This article summarises the steps to take and how to report any data breaches.

How do I report a data breach?

Practitioners must report data breaches concerning Unmind Talk to Unmind without undue delay. Unmind’s Data Protection Officer can be contacted via privacy@unmind.com.

We understand that everyone can make mistakes, and we greatly appreciate your openness and honesty. Our goal is to collaborate with you to address any breaches, learn from them and implement measures to prevent recurrence in the future.

Here are some important details to include in any report:

• Full description of the breach.
• Any personal data concerned.
• The number of individuals concerned.
• Details of any measures already taken.
• Any other details which you feel are relevant for context and/or mitigating further risk.

Reporting data breaches is not only a legal requirement but also a fundamental step in safeguarding sensitive information. By promptly notifying relevant stakeholders and authorities, the process of mitigating the potential risks (such as identity theft, financial loss and wellbeing) becomes more efficient.

Data breach sanctions

In addition to the potential individual harm, failure to report breaches can result in severe consequences. GDPR stipulates fines of up to €20 million or 4% of the organisation's global annual turnover, whichever is higher, for non-compliance.

These fines underscore both the gravity of neglecting to report breaches and the importance of adhering to regulations.