Data Breaches#
Data Breaches are a way for the school to keep track of any data breaches that have happened with school data. Staff members can report anything that they feel may constitute a breach for investigation by the school. The Data Protection Staff at the school can then review, investigate and report any breaches as necessary.
Filing a Breach Report#
A staff user with permission can file a new breach report for investigation. To do this select the Report a Breach option from the Data Breaches section of the side menu. You must then complete the required fields and click the save button to file the report.
Once filed, it will appear for your Data Protection Staff to review. They will make an assessment about the data that was breached (if any) and take appropriate actions.
Editing a Breach Report I Filed#
You can edit a breach report that you filed by selecting the My Data Breaches option from the Data Breaches section of the side menu. This opens a list of all your reported data breaches.
To edit the data breach, select the corresponding checkbox and then click the edit icon on the tables action bar. This opens the Edit Data Breach view.
On this page you can add detail to your data breach report, add a comment to the Data Protection Staff at the school or attach documents that are relevant to the report.
Once you’ve made any updates, click the save button to update the report.
Tip
You can’t delete the documents from your breach reports, this can only be done by the Data Protection Staff.
Editing a Breach Report Filed by Someone Else#
As a staff user with the Assess Breach Reports permission, you can edit all data breach reports that have been submitted. To do so, select the View / Edit option from the Data Breaches section of the side menu. This opens a list of all of the reported data breaches.
To edit the data breach, select the corresponding checkbox and then click the edit icon on the tables action bar. This opens the Edit Data Breach view.
On this page you can add detail to your data breach report, add a comment to the Data Protection Staff at the school or attach documents that are relevant to the report.
As a user with the Assess Breach Reports permission you can delete documents that were attached to the report as well as assign severity, categories, sub categories and update the status of the report.
Once you’ve made any updates, click the save button to update the report.
Deleting a Breach Report#
You can allow a user to delete breach reports by assigning them the Delete Breach Reports permission. This will enable buttons on the Edit Breach Report view that allow the user to delete the report.
Danger
This action is irreversible.
Caution
We do not recommend that you allow deletion of breach reports for any reason.
Notifications#
Users are kept in the loop about their breach reports by receiving notifications when details are changed in the report.
Data Breach Report Filed
Sent to the data protection team when a new breach report is filed.
Data Breach Report Updated
Sent to all related users when an update is made to a breach report.