It might be a member of staff abusing their access to personnel files to stalk someone, the classic “laptop left on a train,” or an actual attack on your systems by crooks or online pests. When a data breach happens, your legal liabilities and the damage to your business and reputation are very directly linked to how prepared you are and how you respond.

While a data breach requires a coordinated response by multiple disciplines, it does throw up some particular legal issues which need careful thinking about - ideally ahead of time. Should you report to the ICO? If so, when? Should you tell the people affected? Do you need to notify your insurers? These decisions need to be made quickly once an incident has happened. Some prior planning can go a long way to facilitating that.

We can help you to plan your incident response in advance. Working with your Information Security (InfoSec) team, we can devise “break glass” decision trees to help you determine who to notify and when, prepare key documents and, if the worst happens, help you in your dialogue with the people affected and with regulators.