What do I do if personal data is lost or exposed?

Where: Trust & legal → Data breach log

Open this page: admin.<your-site>/trust/breaches (replace <your-site> with your site address)

Before you start

You need permission to manage privacy.

Steps

1. Open Trust & legal, then Data breach log.
2. Tap Record a breach.
3. Enter When did you find out? It can’t be in the future.
4. Describe What happened in at least 10 characters.
5. Choose the Kinds of personal data, or type another.
6. Enter People affected (estimate). Use 0 if you don’t know yet.
7. Save. The Board report deadline starts running.
8. Under Notice drafts, tap Copy, edit the text, and send it yourself to the people affected and to the Board.
9. Tap Mark as contained, Mark as notified (fill People told on and Data Protection Board told on) and Close the breach as you go.
10. Use Add a note for your team.

Good to know

• The Board's detailed report is due within 72 hours of detection.
• Drafts only: Keynate never sends these for you.
• The page shows "# open, # past the 72-hour Board deadline."
• Every change is in the activity log.
• Keynate gives tools and drafts, not legal advice. Check the rules that apply to you.

Common problems

• "This time is in the future. Enter when it actually happened."
• "Couldn’t copy. Select the text and copy it by hand."
• "Enter the date and time you found out." Pick when your team first learned about it.
• "Describe what happened in at least 10 characters." Write a short, plain summary of what happened.
• "Choose at least one kind of data, or type another." Tick the kinds of data that were affected, like emails or phone numbers, or type your own.
• "Enter a whole number (0 if you don’t know yet)." Type how many people may be affected. Use 0 if you don't know yet, and update it later.
• "Enter when you told the people, the Board, or both." Add at least one date: when you told the people affected, or when you told the Data Protection Board.
• "Write something here first." The note is needed for this step. Write what you did.

Questions

Related

• Activity log
• Privacy requests
• Grievances