Privacy Breach Notification Readiness Checklist

When to use this

Use this to test whether privacy breach notification obligations are known and can be acted on quickly. Verify specific legal deadlines and content requirements against official legal advice or current law before use.

Checklist

• Applicable notification requirements identified.
• Breach assessment owner assigned.
• Customer/client contractual notification requirements identified.
• Regulator/data subject notification triggers documented.
• Internal escalation route tested.
• Evidence needed for notification decision defined.
• Draft notification templates reviewed by legal/privacy owner.
• Incident response procedure links to privacy notification assessment.

Related notes

• A.5.34 Privacy and Protection of PII
• A.5.25 Assessment and Decision on Information Security Events
• A.5.26 Response to Information Security Incidents