Personal data breach
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Personal data breach - Article 4(12): a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
In the CIPP/E body of knowledge, Personal data breach comes up under Ch 10.3-10.3.1 - Breach notification overview & definition; IAPP Training · Module 9 - BoK II.B.
Personal data breach in context
- A [[personal data breach]] (Article 4(12)) is 'a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to' personal data. (Risk reporting and the meaning of 'personal data breach')
- [[Article 33]] requires the controller to notify the supervisory authority of a [[personal data breach]] ==without undue delay and, where feasible, within 72 hours== of becoming aware, unless the breach is unlikely to risk individuals' rights and freedoms. (Article 33 - notifying the supervisory authority)
- ==Article 4(12)== defines a [[personal data breach]] as a breach of security leading to accidental or unlawful ==destruction, loss, alteration, unauthorised disclosure of, or access to== personal data - including a temporary loss of [[availability]] (e.g., a power outage). (Module 9 · Data breach notification (Articles 33 and 34))
Where Personal data breach is covered in the CIPP/E study notes
- Risk reporting and the meaning of 'personal data breach'
- Module 9 · Data breach notification (Articles 33 and 34)
Related terms
- Risk reporting
- Rights and freedoms
- Availability loss
- High risk
- Disproportionate effort
Test yourself on Personal data breach
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.