Personal Data Breach Log and Assessment Template
Record and assess incidents involving personal data.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Create a template to log and assess personal data incidents. Types of data we hold: [DATA_TYPES]. Number of people affected typically: [SCALE]. Our incident response owner: [OWNER]. Provide a log with fields for date discovered, description, data types, number of people, cause, containment actions, risk to individuals, decision on notification (with the reasoning and the person who decided), and follow-up. Add a risk assessment worksheet with scoring and examples, and a decision aid for whether to notify authorities or individuals marked [VERIFY] against the rules in [JURISDICTION]. Include a timeline checklist for the first 72 hours, using placeholders for deadlines to confirm. Provide two fictional example entries. This is not legal advice. Add a short guide to preserving evidence and not deleting logs during the incident, and a list of the people who must be informed internally with time targets as placeholders. Provide a closing checklist that records lessons learned and updates to controls, and a quarterly summary view of incidents by cause. Add two fictional worked entries to make the log concrete: a misdirected email containing a spreadsheet of forty customers, and a lost unencrypted laptop with a local copy of payroll data. For each, fill in every field, show the risk scoring step by step, state the notification decision with its reasoning, and list the lessons recorded. Provide a one-page first-hour checklist for the person who discovers a breach, with the single most important instruction first (report it, do not wait to understand it). Add a quarterly review view that groups incidents by cause and by control that failed, with a prompt to choose one preventive change per quarter and an owner. All deadlines remain placeholders to be confirmed with counsel in my jurisdiction. Assume I have permission only for my own environment. Give detection and prevention advice, and leave out instructions for compromising anyone else.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.