EUGDPRBreach NotificationEASYFree question
Under GDPR, a personal data breach is defined as:
- A.Only a hacking incident, citing Article 4(12), which defines a personal data breach as limited to unauthorised disclosure, excluding accidental loss or destruction
- B.A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data
- C.Any cyberattack on an organization
- D.Only the theft of personal data
Why B is correct
Article 4(12) defines a personal data breach as a security breach leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data.
Know someone studying for GDPR? Send them this one.