EUGDPRBreach NotificationEASYFree question
Under GDPR, what constitutes a 'personal data breach'?
- A.Any cyberattack on a company
- B.A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data
- C.Only the theft of personal data by hackers
- D.Only data breaches involving more than 1,000 records
Why B is correct
Article 4(12) defines a personal data breach as a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored, or otherwise processed.
Know someone studying for GDPR? Send them this one.