Skip to content

Data Breach

What is Data Breach?

An incident where confidential, private, or protected data is accessed, disclosed, or stolen by an unauthorised party. May trigger breach notification requirements under GDPR, HIPAA, or other regulations.

Information Security

Related terms

Breach NotificationIncident Response

Frameworks that govern data breach

GDPRView framework →HIPAA Security RuleView framework →

What the standards actually require on data breach

Requirements naming data breach across 6 standards, quoted from the control text.

Notifiable Data Breaches Scheme (Australia)6 controls

Determine applicability and maintain a documented data breach response plan per the Notifiable Data Breaches scheme established by the Privacy Amendment (Notifiable Data Breaches) Act 2017 + Part IIIC of the Privacy Act 1988 (Cth) administered by the Office of...

AUNDB-A1 · Applicability, Scope, and Data Breach Response Plan →
Brunei Personal Data Protection Order 2022 (PDPO)4 controls

Breach assessment. Section 27 requires organisations to conduct a prompt assessment to determine whether a data breach is notifiable.

BN-PDPO-s27 · Duty to conduct assessment of a data breach →
India DPDP Act4 controls

Sections 16-17 of DPDP Act 2023 address cross-border transfer + breach notification. Section 16 Processing of Personal Data Outside India: Central Government may by notification restrict the transfer of personal data by a Data Fiduciary for processing to such...

DPDP-CrossBorder-Transfer-Breach-Notification-Sec16-Sec17-DPBI-72Hour-IT-Act-Coord · DPDP Act Sections 16-17 + Cross-Border Personal Data Transfer + Negative List Approach + Personal Data Breach Notification to DPBI 72 Hours + Cooperation with Adjudication + Coord with CERT-In + IT Act 43A Repeal →
Australian Energy Sector Cyber Security Framework (AESCSF)3 controls

Data breach response plans are exercised at regular intervals, and the improvement opportunities the exercises reveal are used to revise them.

australian-energy-sector-cyber-security-framework-aescsf::PRIVACY-1N · PRIVACY-1N: Data breach plans tested and improved →
Lloyd's Minimum Standards - Cyber Security3 controls

Under the Foundational expectations of Principle 12, managing agents tell Lloyd's and the LMA about any significant data breach or cyber incident no later than 72 hours after it occurs.

lloyd-s-minimum-standards-cyber-security::P12.R1 · Report significant cyber incidents and data breaches to Lloyd's and the LMA within 72 hours →
Malaysia PDPA 20103 controls

From 1 June 2025, where a data controller has reason to believe a personal data breach has occurred it must notify the Commissioner as soon as practicable in the manner and form the Commissioner determines.

malaysia-pdpa-2010::12B(1) · Section 12B(1) and Circular 2/2025: notify the Commissioner of a notifiable personal data breach within 72 hours →

Questions people ask about data breach

What is Data Breach?
An incident where confidential, private, or protected data is accessed, disclosed, or stolen by an unauthorised party. May trigger breach notification requirements under GDPR, HIPAA, or other regulations.
Why is Data Breach important for compliance?
Data Breach is a key concept in Information Security. Understanding data breach helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
What concepts are related to Data Breach?
Key concepts related to Data Breach include Breach Notification, Incident Response. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address Data Breach?
Data Breach appears in the requirement text of Notifiable Data Breaches Scheme (Australia), Brunei Personal Data Protection Order 2022 (PDPO), India DPDP Act, Australian Energy Sector Cyber Security Framework (AESCSF), Lloyd's Minimum Standards - Cyber Security. Across these standards we have identified 23 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Data Breach?
Explore our compliance framework pages to see how data breach applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Data Breach applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.