Breach Disclosure / Notification / Reporting

Breach Disclosure / Notification / Reporting

In the case of a confirmed or suspected personal data breach (generally meaning the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data), a breach disclosure (also known as breach communication or breach notification) is the process of notifying the individuals whose personally identifiable information (PII) or personal data was involved, that the breach incident has, or may have, occurred. The individuals may include employees, clients or customers, and possibly other third-parties such as vendors or processors. It is a transparency mechanism that highlights the security failure, allowing affected parties to take additional measures to protect their PII or personal data, mitigate damage, or take other steps to remediate injuries caused by the breach.

Breach reporting, breach notification, or breach disclosure is also the process of notifying regulating and other agencies that there was a confirmed or suspected breach incident.

The data controller/owner is almost always the required entity to notify regulators, authorities, and affected individuals of a breach incident affecting the confidentiality and security of personal data. If a vendor (processor, third-party, consultant, etc.) has a breach, they must notify the data controller/owner.

Laws, regulations, and industry standards dictate specific requirements including time frames, mandatory information, how the information is presented, obligations (free credit monitoring), etc. They can be based on the location of the business and the location of the affected individuals.

United States:  Referred to as breach reporting, breach disclosure or breach notification

European Union: Referred to as breach notification or breach disclosure.


    • Related Articles

    • CSR Breach Reporting Service™

      Patented, award-winning service that removes the burden to report the loss of personal data; CSR in-house privacy professionals file reports to authorities and notices to consumers and others affected.

    • Data Breach

      The unauthorized viewing, unauthorized acquisition, accidental publication, or loss of personally information data that compromises its security, confidentiality, or integrity, and which may lead to the accidental or unlawful use, destruction, loss, ...

    • Credit Reporting Agency

      An organization that regularly engages in assembling or evaluating consumer credit information or other information on consumers for the purpose of furnishing consumer reports to third parties for a fee.

    • Personal Data Breach

      A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed. In other words, if any information relating to an individual ...