In order to properly prepare for the General Data Protection Regulation, the Information Commissioner’s Office is advising organizations to install internal security breach reporting protocols, V3 reports. The ICO made the recommendation in its breach notification advisory, instructing organizations to be compliant from the first day the GDPR is implemented. "You should make sure that your staff understands what constitutes a data breach, and that this is more than a loss of personal data," said the ICO guidance. "You should ensure that you have an internal breach reporting procedure in place. This will facilitate decision making about whether you need to notify the relevant supervisory authority or the public. In light of the tight timescales for reporting a breach, it is important to have robust breach detection, investigation and internal reporting procedures in place."
Full Story