What if I discover a Personal Data Breach in UCC?

• Notify your Head of School/Unit immediately
  
  
• Complete Section 1 of the Personal Data Breach Report Form in conjunction with your Head of School/Unit 
  
  
• Email the completed form to the Information Compliance Office at gdpr@ucc.ie 
  
  
• In the event your Head of School/Unit is unavailable, do not delay in reporting the suspected breach.  Inform the Information Compliance Office right away
  
  

Please note: under GDPR, all breaches must be reported to the Data Protection Commission (DPC) within 72 hours, unless it is unlikely to result in a risk to the data subject.  All reporting to the DPC must be done by the Information Compliance Office.  In addition, breaches that are likely to result in a high risk to an individual – such as identity theft or discrimination– must also be reported to the individuals concerned. 

It is worth noting that a failure to report a breach within the regulatory time-frame could lead to investigation by the DPC and potential fines.