Data Breach

Incident/Breach Details

To assist us with our investigation, please describe the incident/breach, providing as much information as possible. Think of who, what, when, where, why and how. If the reporting of this incident/breach has been delayed by more than 24 hours, please explain why.

Does this incident/breach involve Personal Data?

Yes

If yes, what type of personal data was included?

What type of personal data was included? (E.g. names, address, email address, contact details etc)

× Includes any inherited or acquired data which give unique information about the physiology or the health of that individual, resulting in particular from an analysis of a biological sample from the individual in question.

†Any personal data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of an individual which allows or confirms the unique identification of that individual, such as facial images, fingerprints, blood samples etc.

‡ Includes employment rates, crime rates, poverty status, education levels, life expectancy etc.

◊ Includes CVs, job application forms, job references, PDRs, development reviews, pension, payroll, sickness etc.

Does this incident/breach involve Commercially Sensitive Data?

Yes

If yes, what was the classification?

Please provide the approximate number of data records concerned

Please describe the categories and approximate number of data subjects affected by the data incident/breach

E.g. Who and how many individuals does the data relate to? Do not notify the affected data subjects. The DPO or nominated deputy will determine who should be notified and how.

Are any external parties involved?

Provide details of any external parties that are involved or affected by the incident/breach - E.g. research partner details, suppliers, external stakeholders, commercial partners, collaborating universities etc.

Is the incident/breach ongoing?

Yes

Are you aware of or suspect any related or other data incidents/breaches in your department?

Yes

Please provide details of any remedial action that has already been taken

Do not notify the affected data subjects. The DPO or nominated deputy will determine who should be notified and how.

Privacy statement Any Data processed will be processed in accordance with IJM UK's Data Protection Policy. IJM UK's Data Protection Officer, Steph Harris, can be contacted at [email protected] and any requests or complaints should be made in writing to IJM UK's Data Protection Officer.

Data Incident and Breach Report Form

Data Incident and Breach Report Form

Login