A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to the processed personal data.
The data controller is obliged to document and assess all personal data breaches. If a personal data breach can pose a risk to data subjects, the Office of the Data Protection Ombudsman will also be notified of the breach. If a personal data breach poses a high risk to the data subject, the data subject must also be informed of it. In certain situations, personal data breaches are also reported to other parties.
