GDPR breach notification workflow
What this control requires
Personal data breaches must be assessed within 12 hours and reported to the Belgian DPA within 72 hours where risk to data subjects exists.
Other NBB Circular controls
BE_NBB_CIRCULAR_2012_11-CTRL-001 - Daily safeguarding reconciliationBE_NBB_CIRCULAR_2012_11-CTRL-002 - Critical ICT incident reportingBE_NBB_CIRCULAR_2012_11-CTRL-004 - AML suspicious transaction monitoringBE_NBB_CIRCULAR_2012_11-CTRL-005 - Quarterly PCI vulnerability assessmentBE_NBB_CIRCULAR_2012_11-CTRL-006 - Outsourcing provider oversightBE_NBB_CIRCULAR_2012_11-CTRL-007 - DORA Register of Information maintenanceBE_NBB_CIRCULAR_2012_11-CTRL-008 - CTIF suspicious activity escalationBE_NBB_CIRCULAR_2012_11-CTRL-009 - NIS2 cyber resilience testingBE_NBB_CIRCULAR_2012_11-CTRL-010 - Instant payment availability monitoringNBB2012-001-001 - Outsourcing Risk Management Framework for PIsNBB2012-002-001 - Critical Outsourcing Monitoring and OversightNBB2012-003-001 - Outsourcing Notification and NBB Approval