What a data breach is
A data breach is when personal data is lost, stolen, accessed without permission or shared in a way that could cause harm.
This can include hacking, sending information to the wrong person, losing paper files or exposing data online.
What to do if your data has been breached
If an organisation tells you that your data has been breached, you should read the notice carefully and follow any safety advice given.
You should consider changing passwords and monitoring your accounts if there is a risk to your identity or finances. If you believe a breach has not been handled properly, you can make a complaint.
How to complain to the IDPO
You can complain to the Information and Data Protection Office if you believe your data rights have been breached.
You should include:
- Your name and contact details
- The name of the organisation involved
- A description of what happened
- Copies of any relevant correspondence
What the IDPO can do
The Information and Data Protection Office can investigate complaints.
We can issue binding orders that require organisations and public authorities to take action. We can also impose administrative fines.
Appeals
If you disagree with a decision made by the Information and Data Protection Office, you may be able to appeal through the courts.