Section 5A(8)

Service providers shall maintain an inventory of personal data breaches comprising — which shall be sufficient to enable the Information Commissioner to verify compliance with the provisions of this regulation. The inventory shall only include information necessary for this purpose. the facts surrounding the breach, the effects of that breach, and remedial action taken

← 7 · All articles · 9 →

Source: legislation.gov.uk · retrieved 2026-09-04