We can help you with incident response and be your data breach coach. If you have had an incident of failing to protect personal information (or a breach in your security), the way you respond is crucial. There are lots of decisions you need to make, for example:
- When are we going to notify the Regulator?
- When are we going to notify the data subjects and what will we tell them?
- What security steps do we need to take to close the hole?
We can help you to find answers to these questions and advise you on the legal issues around them. It is important to respond quickly – there is no time to lose.
Incident Response Policy
It is also important that you put an Incident Response Policy or Plan in place now before the incident happens. It is too late to try to put the policy in place once an incident has occurred. It is important that everyone knows what to do when an incident occurs. What steps will be taken? Who will make the decisions? We can help you draft an Incident Response Policy customised for your organisation. It provides a great feedback mechanism – a way for you to evaluate what went wrong, how you failed to protect personal information and what you can do to ensure that it does not happen again.
Incident Response Form
We can help you draft an Incident Response Form customised for your organisation that both the employee reporting the incident and your Information Officer should complete.
Data Breach Coach
We can coach you through dealing with a breach or incident. We’ll coach you through responding to the recent security incident or data breach that has occurred. If you have reasonable grounds to believe that you have had an incident, contact us by filling in the form on the left. Because we are attorneys, confidentiality and legal privilege will apply automatically. We can coach you every step of the way to ensure it is dealt with in the most effective way.
Incident Communication Plan
When an incident occurs, what are you actually going to say to people? The actual words that you use are important because they determine how people will react to news of your incident and they have legal consequences and rules that they need to comply with in terms of the relevant data protection laws (such as POPI in South Africa or the DPA in the United Kingdom). We can provide you with an incident communication plan so that you’re ready to say the right things at the right time.
Automatic Incident Response
We can offer you an automated solution to incident response. We have worked with an incident response software development company to develop a cutting edge automated solution.
The Benefits for You
- Streamline the process of responding so that you can do so faster.
- Be able to provide an auditable record of your response.
- Produce evidence to defend yourself against a damages claim.
- Fix problems that result in you failing to protect personal information.
- Gain the benefits of legal privilege.
- Avoid damages claims and fines.