A data protection incident is an event in which personal data is disclosed, altered, deleted or otherwise compromised without authorisation. Companies and organisations are obliged to document data protection incidents and, under certain circumstances, report them to the data subjects and the supervisory authority.
