Review risk: A personal data breach is not reported within 72 hours
TSK-0261
-
Last updated
Open
Owner
Sam de VriesDue
1/26/2027Source
Risk reviewAbout this Risk
RSK-014 — A personal data breach is not reported within 72 hoursAs a processor Tidewell IT must tell the customer without undue delay, and the customer has only 72 hours to notify the authority. A breach that sits unnoticed in a ticket queue or over a weekend could make the customer miss its deadline.
Review
On trackNext action is 1/26/2027 — no urgency right now.