Talk:Data Breach Policy/Proposed revisions June 2014

Rationale for changes

We now have a standard form for reporting breaches which makes a lot of the old working unnecessary (you can view the current copy [1]

I've also re-emphasised the requirement to notify within 24 hours and noted that this now applies to all breaches, however trivial. If in doubt staff should contact the ICO to confirm if something less serious constitutes a breach and tend to err on the side of caution and notify.