How we helped
We provided our Cyber Response service - we worked with the client to deal with containment, as well as analysis of the data protection roles and responsibilities of the various parties to allow for informed notifications to be provided to the respective supervisory authority under the GDPR within the prescribed 72-hour breach period, as well as working with the client to assess the impact on affected data subjects in the context of the proposed data subject notifications.
Outcomes
Our prompt cyber response service helped our client contain the risks associated with regulatory fines and enforcement actions for cyber breaches. It also helped our client troubleshoot issues with its supplier ‘online ecosystem’ to help guard against future risks.