Breach!! Do I report it?
GDPR requires you to maintain a ‘data breach register’ (similar to a Health & Safety ‘near miss’ register) and have a mechanism in place for you to know what breaches might, or should, be reported to the regulatory authority (I.C.O.) and/or to the data subjects too.
This document template will assist you with this requirement., Simply amend to include your header, footer, logo and some other key pieces of information (such as contact details etc.) you may also have to delete sections that are NOT relevant to your business and you will have a document that will be key to forming part of your accountability portfolio