{"id":32200,"date":"2022-06-30T09:35:42","date_gmt":"2022-06-30T09:35:42","guid":{"rendered":"https:\/\/www.digife.it\/?p=32200"},"modified":"2022-06-30T09:35:42","modified_gmt":"2022-06-30T09:35:42","slug":"data-breach-what-to-do-in-case-of-personal-data-breach","status":"publish","type":"post","link":"https:\/\/www.digife.it\/en\/data-breach-what-to-do-in-case-of-personal-data-breach\/","title":{"rendered":"Data Breach - what to do in case of a personal data breach"},"content":{"rendered":"

In 2022, the theme of <\/span>data breach<\/b>,<\/span> or the violation of personal data, and many other issues related to the privacy of web users. Last, but not least, the news that the <\/span>Privacy Guarantor has prohibited the use of Google Analytics in Italy<\/span><\/a>.\u00a0<\/span><\/p>\n

Given the strong prominence that this topic has aroused, in this article we will go to see what a <\/span>data breach<\/b> and how to behave when it is a victim. So that our customers are prepared in the event that this happens to them.\u00a0<\/span><\/p>\n

What does data breach mean?<\/b><\/h3>\n

With the term <\/span>data breach <\/b>a security breach is understood "which involves - accidentally or illegally - the destruction, loss, modification, unauthorized disclosure or access to personal data, transmitted, stored or otherwise processed."<\/span>1<\/span><\/a><\/p>\n

In other words, who is the victim of <\/span>data breach<\/b> risks seeing confidentiality and even accessibility to their data compromised. Examples include data capture by unauthorized third parties, data theft, and the inability to access data due to external attacks and malware.\u00a0<\/span><\/p>\n

What to do in the event of a data breach?<\/b><\/h3>\n

The legislation that regulates violations of personal data currently in force is the <\/span>Regulation (EU) 2016\/679<\/span><\/a> of the European Parliament and of the Council of 27 April 2016.<\/span><\/p>\n

According to the document, the subject who suffered a <\/span>data breach<\/b>, whether it is a public entity, a company, an association or a professional, must notify the damage suffered within 72 hours from the moment in which he became aware of the fact. Here, however, a first distinction must be made.<\/span><\/p>\n

A possible <\/span>data breach<\/b>, in fact, it must always be registered, but it must be notified to the Privacy Guarantor only if it involves an effective risk for the rights and freedoms of individuals. In any case, however, it is necessary to notify the data controller, or the person whose data were kept that have been compromised.\u00a0<\/span><\/p>\n

In the event that you decide to notify, the Guarantor requires some information:\u00a0<\/span><\/p>\n