workflow
Privacy Breach Assessment & Notification
Personal-data breach response, anchored on a breach-register Issue item created for the breach (issue_type: exception, source: management_identified, identified_date = the awareness timestamp); the workflow instance attaches to that Issue and the breach register is the queryable set of these Issues. Consumes the Incident Management Lifecycle workflow's handoff package (incident record, containment status, investigation timeline) and drives it from handoff to closure: a frozen, dated exposure inventory; a per-jurisdiction notifiability determination against GDPR Article 33, US state (California/CCPA included), and HIPAA clocks; regulator and data-subject notifications with milestone tracking; processor coordination against the processor's Vendor record and DPA; remediation and support Issue items; the Article 33(5) breach-register entry; and a post-breach review that hands off to the DPIA / Privacy Impact Assessment workflow for each affected processing activity. In scope: the notifiability judgment and notification execution downstream of the incident handoff; out of scope: incident containment and forensics, which stay with incident response.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- reg
- department
- privacy
- lineOfDefense
- operate
Details
- teams
- privacy
- it
- domains
- reg
- standards
- gdpr
- hipaa
- ccpa
- sourceTemplateId
- workflow-library:reg-privacy-breach-notification
- releaseId
- sha256:b6d82ac360dbc52b9d28da072da02bf71b207adfa96d8d8119353ae4692a80e4
- canonicalUrl
- https://workflow-library.com/all/?w=reg-privacy-breach-notification
- capabilities
- mappingStatus
- mapped
- lineOfDefense
- operate
- controls
- UC-IR-05
- UC-IR-08
- UC-IR-10
- UC-LOG-06
- UC-DATA-15
- UC-DATA-16
- roleIntegrity
- activityCount
- 0
- ermPhases
- lineRoles
- serviceModes
- warnings
Source
No record-specific source URL is provided.
Download workflow template · Release: sha256:b6d82ac360dbc52b9d28da072da02bf71b207adfa96d8d8119353ae4692a80e4
Connections
- Privacy Breach Assessment & Notification operates UC-IR-08 — Notify authorities and affected parties within deadlines
- Privacy Breach Assessment & Notification operates UC-LOG-06 — Evaluate events and declare incidents against defined criteria
- Privacy Breach Assessment & Notification operates UC-DATA-16 — Bind third parties handling personal data to privacy commitments
- Privacy Breach Assessment & Notification operates UC-IR-05 — Assess and validate incident scope, impact, and magnitude
- Privacy Breach Assessment & Notification operates UC-IR-10 — Learn from incidents and communicate corrective actions
- Privacy Breach Assessment & Notification operates UC-DATA-15 — Record and notify unauthorized disclosures of personal data