GDPR Registers: GDPR Breaches Reporting & Management

How are you reporting personal data breaches?

Under the EU's General Data Protection Regulation (GDPR), organisations must report serious data breaches to their supervisory authority. In the UK, for example, this is the ICO. Organisations must keep a record of all personal data breaches, regardless of whether they are reportable to the regulator.

Ensuring all staff report any breaches to their compliance manager or Data Protection Officer is challenging; staff may not know how to make the report, who the reporting officer is and the associated reporting requirements. This can lead to breaches going unreported, which in some cases can lead to huge fines.

How can we help?

VinciWorks has built a best-practice reporting solution that allows staff to easily and efficiently report any data breaches or concerns. Examples of such breaches include:

Access to personal information by an unauthorised third party
Accidentally sending personal data to the wrong person
Losing devices that contain personal information
Altering personal data without permission
Losing personal data

All responses that require immediate action can be flagged, allowing data protection officers to easily monitor whether the breach has fully been resolved.