On January 18, 2024, the European Data Protection Board announced the release of a thematic one-stop-shop (“OSS”) case digest titled, “Security of Processing and Data Breach Notification” (the “Digest”). This publication analyzes a selection of decisions adopted by EU data protection authorities on data security and data breaches.
The Digest covers various topics related to data security and breaches, such as the evaluation of technical and organizational security measures utilized by organizations, the factors leading to personal data breaches (such as malicious attacks, insufficient company practices, and human error), and the procedures for notifying data protection authorities and affected individuals about data breaches.