Do I have an obligation to report after every data breach?

If your organisation is affected by cybercrime, personal data of third parties may end up in the hands of criminals. If this results in a security incident, this is called a data breach. A data leak is considered a breach of the privacy legislation. As a company you are, in most cases, obliged to report this to the Dutch Data Protection Authority and sometimes also to the parties involved whose data has been leaked. With cyber insurance you insure yourself against the consequences of incidents relating to digital processes, such as a data leak.

The origins of a data breach

A data leak can occur in various ways. For example, it may be caused by a stolen or lost laptop or USB stick containing important data. Even if your belongings have not been stolen, cyber criminals can still 'break into' your systems, which can also result in a data breach. Furthermore, the loss of data due to a fire is considered a data breach.

Preventing a data breach

Various tips have been drawn up to prevent data leaks. We discuss a number of them below.

• Keep the number of places where personal data is stored limited
• Only give staff members access to the data if this is necessary
• Do not store unnecessary information
• Delete data that is no longer relevant

Calculate the premium for your cyber insurance directly