What should you do in case of a personal data breach?

new-visibility-agenzia-comunicazione-marketing-digitale-cantu-web-Domini-mail-server
new-visibility-agenzia-comunicazione-marketing-digitale-cantu-web-ecommerce-internazionale
new-visibility-agenzia-comunicazione-marketing-digitale-cantu-provincia-como-sviluppo-web
new-visibility-agenzia-comunicazione-marketing-digitale-cantu-provincia-como-web
Data breach

What to do in case of a breach

In case of a personal data breach the first thing to do is to contain the incident, work out which data is involved and immediately inform your legal advisor or DPO, who assesses whether and to whom to report what happened. Notification obligations and deadlines depend on the case and on the applicable law, GDPR or nLPD.

For a company in Brianza or Como our contribution is technical. This page is for information only and is not legal advice.

Technical side

What the technical team can do

While your advisor assesses the legal aspects, we work on the website on these fronts, for companies in Cantù, Milan and Lugano.

new-visibility-agenzia-comunicazione-marketing-digitale-cantu-provincia-como-sviluppo-software
NewVisibility, communication and digital marketing agency in Cantù
new-visibility-agenzia-comunicazione-marketing-digitale-cantu-gestionale-backend-csm
new-visibility-agenzia-comunicazione-marketing-digitale-cantu-siti-web-ecommerce.programmazione-home
  • Isolate the weak point
  • Check the recorded access
  • Restore from backups
  • Fix the cause

Want to know how prepared your website is?

Let's talk: we work on the technical side, together with your legal advisor or DPO.

Services of interest

The data collected by the website is found in the database, on the server, in backups and in any connected services such as newsletter, CRM or management software. The websites of NewVisibility, an agency in Cantù (Como), are hosted on our own managed servers; the privacy notice should be defined with your legal advisor or DPO.

Only people authorised by the controller can access the data collected by the website, with separate profiles, personal passwords and permissions limited to their role. In projects for companies in Cantù, Como and Milan we configure access; who should have it is decided by your legal advisor or DPO.

The data minimisation principle requires collecting only data that is adequate, relevant and limited to what is necessary for the stated purpose. On a website it applies to forms and sign-ups: for companies in Como and Brianza it is worth checking them with your legal advisor or DPO.

The right to be forgotten is the possibility, in the cases provided by law, to request the erasure of your personal data. It is not absolute and may coexist with other retention obligations. For a company website in Como or Milan you need to know where the data is; every assessment is up to the advisor.

A privacy audit of a website starts by mapping data, forms, cookies and third-party tools, then compares them with the notice and consents. For companies between Como and Milan, NewVisibility prepares the technical picture from Cantù; the compliance assessment stays with the legal advisor or DPO.

Login reserved area

Register to access sections and restricted site content. Your user will be enabled within 48/72 hours.

Login registered user

New user?

Create an account in order to access the reserved contents.