Breach Notification
Law
Legal and policy process to notify regulators and/or data subjects after certain security incidents.
Definition
Breach notification obligations vary by law and jurisdiction. Organizations must assess risk, document the incident, notify within required timelines, and provide clear guidance on protective steps.
Why this matters
Why it matters: Timely notification reduces harm and supports transparency.
Example
Example: Establish an incident response plan with notification templates, decision criteria, and a timeline aligned to applicable laws.