A clear, tested plan for containing a personal data breach, assessing the risk and meeting the 72-hour reporting deadline.
Data protection & GDPR
Data Breach Response Plan
About this document
A practical incident plan for personal data breaches: who does what in the first hour, how to contain and assess the incident, when and how to report it to the Information Commission within 72 hours, when to tell the people affected, and how to learn from it. It includes a 72-hour checklist, a risk matrix, a notice to individuals and a contacts sheet.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
Data protection & GDPR
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
