---
title: GDPR - Breach process | myhrtoolkit
description: This page outlines the process followed by Myhrtoolkit in the event of a suspected data breach, giving details of timeline and actions to be taken.
---

** Call us **

Menu **

[0345 225 0414](tel:03452250414)

- [Customer Support **](https://www.myhrtoolkit.com/support)
- [Login **](https://app.myhrtoolkit.com/user_portal/)

[![myhrtoolkit-agilio-logo-colour-800px](https://www.myhrtoolkit.com/hs-fs/hubfs/Logos%20and%20Brand/myhrtoolkit-agilio-logo-colour-800px.png?width=800&height=82&name=myhrtoolkit-agilio-logo-colour-800px.png "myhrtoolkit-agilio-logo-colour-800px")](http://myhrtoolkit.com)

[![myhrtoolkit-agilio-logo-white](https://www.myhrtoolkit.com/hs-fs/hubfs/Logos%20and%20Brand/myhrtoolkit-agilio-logo-white.png?width=1000&height=103&name=myhrtoolkit-agilio-logo-white.png "myhrtoolkit-agilio-logo-white")](http://myhrtoolkit.com)

# GDPR - Breach process

> > > >

 Subject Access Requests – myhrtoolkit Users FAQ

 

### ***What is a personal data breach?***

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. This includes breaches that are the result of both accidental and deliberate causes. It also means that a breach is more than just about losing personal data.

#### ***What does GDPR say about personal data breaches***

GDPR introduces a duty on Data Controllers to report certain types of personal data breach to the relevant supervisory authority; generally the Information Commissioner’s Office (ICO). If the breach is likely to result in a high risk of adversely affecting individuals’ rights and freedoms, you must also inform those individuals without undue delay.

How can I report a potential breach? You can email us at dataprotection@myhrtoolkit.com or alternatively you can write to us at our registered address.

If a User, other than a registered system Controller reports a breach, we will need to validate their ID with a Controller from their organisation.

We will acknowledge receipt of a reported incident.

#### ***How will myhrtoolkit respond?***

Once we have identified that there is a breach or the likelihood of a breach, we will acknowledge as such to the associated Data Controller via a system Controller.

A director of Myhrtoolkit will then supervise the completion of this 4 point process

1. **Investigate, within 48 hours** 
     - Determine if a breach has occurred, and if so, what personal information has been affected.
     - Identify the cause of the breach.
     - Assess the nature of any personal data breach including where possible, the categories and approximate number of data subjects concerned, and the categories and approximate number of personal data records concerned;
     - Identify the likely consequences of any personal data breach;
     - Document the measures taken or proposed to be taken to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.

1. **Record** 
     - make a detailed entry of the breach including the data and customers affected and the specific circumstances and scope of the breach.

1. **Notify**

In the case of a personal data breach, we will inform the controller(s) of all affected parties. This shall occur without undue delay and, where feasible, not later than 72 hours after having become aware of it. This will include:

- the nature of the personal data breach including where possible, the categories and approximate number of data subjects concerned, and the categories and approximate number of personal data records concerned
- the name and contact details of the data protection officer or other contact point where more information can be obtained
- the likely consequences of the personal data breach
- the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects

Where, and in so far as, it is not possible to provide the information at the same time, the information may be provided in phases without undue further delay.

If notification is not made within 72 hours, it shall be accompanied by reasons for the delay

1. **Rectify**

We will take steps to rectify the identified situation.

We will implement changes to prevent a repeat occurrence.

## Call 0330 236 8399 for more information

[![Start Free Trial](https://no-cache.hubspot.com/cta/default/5034683/32edf79f-df3d-4f77-b258-8520c8086894.png)](https://cta-redirect.hubspot.com/cta/redirect/5034683/32edf79f-df3d-4f77-b258-8520c8086894)

#### Myhrtoolkit features

#### Information

#### Resources

t: 0330 236 8399

e: [enquiries@myhrtoolkit.com](mailto:enquiries@myhrtoolkit.com)

[**](https://www.facebook.com/myhrtoolkit) [**](https://twitter.com/myhrtoolkit) [**](https://www.linkedin.com/company/myhrtoolkit-limited)

© 2021 myhrtoolkit Limited, HR software on demand. All rights reserved. Various trademarks held by respective owners.

Unit 18 Jessops Riverside, 800 Brightside Lane, Sheffield S9 2RX

 Remove cookies 

  

** Top

```json
// Business name, address, opening hours, logo social profiles
{
  "@context" : "http://schema.org",
  "@type": "LocalBusiness",
  "@id": "/privacy/breach-process/",
  
  "name" : "Myhrtoolkit Ltd",
  
  "logo" : "https://www.myhrtoolkit.com/hubfs/Logos%20and%20Brand/favicon-teal.svg",

"image" : "https://www.myhrtoolkit.com/hubfs/Logos%20and%20Brand/favicon-teal.svg",
  
  "url": "https://www.myhrtoolkit.com/",
  
  "address": {
    "@type": "PostalAddress",
    "streetAddress": "Unit 18 Jessops Riverside",
    "addressLocality": "Sheffield",
    "addressRegion": "South Yorkshire",
    "postalCode": " S9 2RX"
 	},
  "telephone": "0345 225 0414",
 
  "openingHours": 
  [
    "Mo-Fr 09:00-17:30"
  ],
  "email" :"sales@myhrtoolkit.com",
  "sameAs" : 
  [ "https://twitter.com/myhrtoolkit",
    "https://www.linkedin.com/company/myhrtoolkit-limited",
    "https://plus.google.com/+myhrtoolkit"
  ],
    
  "description": "HR Software for SMEs"
  }
 }
```

```json
// Colloquial site name - for mobile SERPs
{  
    "@context" : "http://schema.org",
       "@type" : "WebSite",
       "name" : "myhrtoolkit",
       "url" : "https://www.myhrtoolkit.com/"
}
```