A clerk accidentally sends a spreadsheet containing clients' names, addresses and ID numbers to the wrong email address. Under the Data Privacy Act, what should the office do first?
Correct answer: B. Report the incident to its data protection officer so the breach can be assessed and handled, including any required notifications
Accidental disclosure is still a personal data breach. The office should report it to its data protection officer, contain it (for example by asking the recipient to delete the file), assess the risk and, where required, notify the NPC and the affected persons within the required period.
medium