Data breach
A situation in which personal or confidential data is accessed, taken, exposed or lost by unauthorised parties.
- 01
Why it matters
Legal deadlines for personal data breaches are short: under KVKK the Board must be notified within 72 hours at the latest, and the GDPR also sets 72 hours. Affected people may need to be informed too. The faster and more accurately the scope is established, the more limited both the legal risk and the reputational damage.
- 02
Example
Because of a misconfigured cloud storage bucket, customer invoices were publicly accessible. The company closes access, works out from the logs how long the bucket was open and who downloaded files, and makes the notification within 72 hours.
- 03
Common mistake
Holding back notification until the full scope is certain. The clock starts when you learn of the breach; the first notification is made with what is known, and missing details are added later.
- 04
Let's talk about your project.
Tell us what you need; we will define the scope together.