Breach Register
What is Breach Register?
A documented log of all personal data breaches including their nature, affected individuals, consequences, and remedial actions taken.
Terms that appear alongside breach register
Each of these is named in at least one of the same controls as breach register. The number is how many controls name both.
- gdpr 9 shared controls
- breach notification 9 shared controls
- encryption 7 shared controls
- business continuity 6 shared controls
- data subject 6 shared controls
- audit 5 shared controls
- data breach 5 shared controls
- integrity 4 shared controls
Frameworks that govern breach register
What the standards actually require on breach register
Requirements naming breach register across 5 standards, quoted from the control text.
The data controller must keep, in physical and electronic form, records and a register of personal data breaches for at least two years (from the notification or the breach), including breaches that did not meet the notification criteria, recording at least th...
malaysia-pdpa-2010::DBN-14 · DBN Guideline para. 14 and Circular 2/2025 para. 4(7): a breach register kept at least two years, including breaches not notified →Chapter IV (Articles 27-29) Security and Risk. Article 27 Security of Processing - GDPR Article 32 transposition: appropriate technical + organisational measures considering state of the art + costs + nature + scope + context + purposes + risk;
ICELAND-Act90-Chap4-Security-BreachNotification-DPIA-Personuvernd-72hr · Iceland Act 90/2018 - Chapter IV Security of Processing + Breach Notification + DPIA (Articles 27-29) →Sections 10-11 of DPDP Act 2023 establish enhanced obligations on entities designated as Significant Data Fiduciaries (SDFs). Section 10 Significant Data Fiduciary: Central Government may notify Data Fiduciary or class of Data Fiduciaries as SDF having regard...
DPDP-SignificantDataFiduciary-SDF-Sec10-DPO-IndependentAuditor-DPIA-Algorithmic · DPDP Act Sections 10-11 + Significant Data Fiduciary (SDF) + Data Protection Officer + Independent Data Auditor + DPIA + Algorithmic Software Audit + Privacy by Design + Records of Processing Activities →Articles 39 + 46 of UU PDP establish security + breach notification obligations. Article 39: Personal Data Controller shall protect personal data processed through implementation of appropriate technical + organisational + and physical security measures + comm...
IDPdp-Security-BreachNotification-72Hour-Art39-Art46-Encryption-Pseudonymisation-Records-IR · Indonesia PDP Article 39 + Article 46 + Reasonable Security + Encryption + Pseudonymisation + Personal Data Breach Notification 3x24 Hours (72 Hours) to DPA + Data Subjects + IR Plan + Records →Operate breach notification + records of processing + processor engagement per Oman PDPL Articles 21 + 22 + 23. Breach notification must (a) notify the MTCIT regulator (or designated supervisory authority) within 72 hours of becoming aware of personal data bre...
OMANPDPL-5 · Breach Notification (72 hours), Records of Processing, Processor Engagement →Questions people ask about breach register
What is Breach Register?
Why is Breach Register important for compliance?
Which compliance frameworks address Breach Register?
Where can I learn more about Breach Register?
See how Breach Register applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.