Case study: An international service provider in the hospitality sector


Our client experienced a cyber breach which affected a large volume of records, with the breach having global implications (primarily Europe and USA), due to a platform arrangement being put in place between the client and its third parties.

How we helped

We provided our Cyber Response service - we worked with the client to deal with containment, as well as analysis of the data protection roles and responsibilities of the various parties to allow for informed notifications to be provided to the respective supervisory authority under the GDPR within the prescribed 72-hour breach period, as well as working with the client to assess the impact on affected data subjects in the context of the proposed data subject notifications.

Outcomes

Our prompt cyber response service helped our client contain the risks associated with regulatory fines and enforcement actions for cyber breaches. It also helped our client troubleshoot issues with its supplier ‘online ecosystem’ to help guard against future risks.

Data protection hub

View the hub now to explore additional legal resources.

Stay informed

Our latest articles, events and webinars on data protection law.