This form is to be used when data controllers wish to report a personal data breach of the Data Protection (Bailiwick of Guernsey) Law, 2017 to the Office of the Data Protection Commissioner (ODPC). It should not take more than 15 minutes to complete.
Please provide as much information as possible and ensure that all mandatory fields are completed. If you do not know the answer, or you are waiting on further information pending the completion of an internal investigation, please set that out in your response.
In the wake of a personal data breach, swift containment and recovery of the situation is vital. Every effort should be taken to minimise the potential impact on affected data subjects, and details of the steps taken to achieve this should be included in this form.