Personal data breach

A personal data breach is a security incident leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data. Unless the breach is unlikely to pose a risk to individuals, the controller must notify the supervisory authority within 72 hours of becoming aware of it, and must inform affected individuals when the risk is high. In Sweden the notification goes to IMY.

Läs definitionen på svenska: Personuppgiftsincident

Also known as: 72-hour notification · 72-timmarsregeln