How to manage a data breach?

A data breach is a security incident involving personal data held by a data controller. Law no.  1.565 of December 3, 2024 introduces a new obligation for data controllers: they must notify any personal data breach of which they have become aware that is likely to result in a risk to the rights and freedoms of the affected individuals.

As there is no such thing as zero risk, it is important to put in place upstream measures to prevent any breach from occurring, as well as an action plan to deal with any incident as effectively as possible and to respond in accordance with the law.

To find out more, download the factsheet here.