Clifford Chance

Data and Security Incident Reporting – Stress Test on Risk Governance Has Begun

3 August 2018

Duties to report personal data and security incidents under the GDPR and the NIS Directive are now in force. The Italian Data Protection Authority reports: (i) a 500% increase in data breach reporting has been recorded since 25 May 2018, (ii) 140 data breaches were recorded only in May 2018 and (iii) 330,000 individuals were affected by data breaches from March to May 2018. Failure to notify exposes businesses to the risk of penalties, claims for damages and reputational damage. Prevention is the key.

Download PDF