To report an incident effectively, particularly related to data breaches or accidents at work, you'll need to include specific details based on the type of incident. Here's a summary of what information is required for each scenario:
| Incident Type | Information to Include |
|---|---|
| Data Breach | - What data is involved? <br> - Format and encryption status <br> - Who is affected (type and number of records) <br> - Sensitivity of the data <br> - Potential risks to individuals <br> - Steps already taken for recovery <br> - If stolen, report to police and provide crime number <br> - Details of what happened and involved employees <br> - Ongoing risks to information security |
| Accidents at Work | - What type of injury or incident occurred? <br> - Date and time of the incident <br> - Details of those involved <br> - Outcome (hospitalisation, type of injury) <br> - Any dangerous occurrences <br> - Any subsequent action taken or needed |
Reporting should be prompt, with data breaches reported as soon as they're discovered and accidents within specific timeframes. If you have immediate concerns for someone’s safety, take actions to warn them and consider contacting the police.
For accidents at work, remember to notify the Health and Safety Executive (HSE) where applicable.