Personal Data Breach Notification

Please provide as much information as possible. If you do not know the answer, or you are waiting on completion of an internal investigation, please state this. In the wake of a personal data breach, swift containment and recovery of the situation is vital. Every effort should be taken to minimise the potential impact on affected individuals, and details of the steps taken to achieve this should be included in this form. What is Personal Data: Personal Data (also known as personal information) is defined by the following: • Personal data includes any information relating to an identified or identifiable natural person – put simply, this includes data which either by itself or with other data held by, or available to CSSC, that can be used to identify you. • Personal data also includes special or sensitive categories of personal data. Personal data may include but is not limited to the following: • Full name, date of birth, CSSC Number, postal address, email address, employer/business, professional information, job titles, next of kin and dietary requirements or national, regional or area conference, telephone number • Bank and card details • Any other personal data which is voluntarily provided to CSSC from time to time.

Details of the data protection breach


Personal data placed at risk


Containment and recovery


Miscellaneous