The ICO exists to empower you through information.

Personal data breaches

Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.

A range of advice and tools to help you understand what a data breach is, how to respond to an incident and how to avoid data breaches in the future.

If you’ve had a personal data breach, there are some immediate steps you need to take, such as containing the breach. We’ve created a range of information to help you to deal with personal data breaches.

Guidance and advice

72 hours, a guide to responding to a personal data breach

The simple steps to take in the first 72 hours if you discover a data breach in your organisation.

Understanding and assessing risk in personal data breaches

A guide to help you assess the risks posed by a recent data breach and understand if you need to report it to the ICO.

How to minimise the risk of personal data breaches happening

A handy guide to help you improve data security and prevent it from getting lost, damaged or stolen.

Storing, sharing and disposing of people's information securely

A range of advice and guidance on sharing and disposing of people's information securely.

Tools

Self-assessment: data breaches

A practical tool that will help you to assess the risks following a recent data breach and whether it's reportable to the ICO.

Checklist: how well could you respond to a personal data breach?

A tool to help you assess how your organisation deals with data breaches and generate a practical action list to improve your process.

Video guides

A video guide on data breaches

A short video for beginners explaining data breaches, what to do if you have one, and who you need to tell about it.

We'd love your feedback