A data protection incident is an event in which personal data is disclosed, altered, deleted or otherwise compromised without authorization. Companies and organizations are required to document data protection incidents and, under certain circumstances, report them to the data subjects and the supervisory authority.
