GDPR Breach Notification

This playbook triggers by a GDPR breach incident, and then performs the required tasks that are detailed in GDPR Article 33. The General Data Protection Regulation (the GDPR) is a regulation in EU law on data protection and privacy of individuals. The GDPR introduces the requirement for a personal data breach to be notified to the competent national supervisory authority and in certain cases, to communicate the breach to the individuals whose personal data have been affected by the breach. ***Disclaimer: This playbook does not ensure compliance to the GDPR regulation. Before using this playbook, we advise consulting with the relevant authority, and adjusting it to the organization's needs.

GDPR · 22 tasks · 0 inputs · 0 outputs

Commands used

closeInvestigation send-mail setIncident

Flowchart

yes yes yes Yes No Yes Start Start Notify DPO of suspected data breach Notify DPO of suspected d... DPO confirmed a breach happened DPO confirmed a breach ha... The breach is likely to result in a risk to individuals The breach is likely to r... Breach documentation process Breach documentation process No breach has occurred No breach has occurred Breach report process Breach report process Generate breach report - GenerateInvestigationSummaryReport Generate breach report GenerateInvestigationSummaryR... The breach poses a high risk to individuals The breach poses a high r... Breach is documented in Demisto - Print Breach is documented in D... Print Done Done Update DPO Answers to incident - setIncident Update DPO Answers to inc... setIncident Send information report to local supervisory authorities - send-mail Send information report t... send-mail Notify Individuals - send-mail Notify Individuals send-mail DPO updates report DPO updates report Get new report from DPO Get new report from DPO Contact authorities Contact authorities Get Authority Contact details - GDPRContactAuthorities Get Authority Contact det... GDPRContactAuthorities Get admin approval - manual Get admin approval - manual Send report to DPO approval - send-mail Send report to DPO approval send-mail Get DPO Approval for the report Get DPO Approval for the ... Close Investigation - closeInvestigation Close Investigation closeInvestigation