Personal data breach
A GDPR security breach causing accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data.
In practice
Triage confidentiality, integrity, and availability impacts; document every assessment and meet notification deadlines when triggered.
Common confusion
A breach can involve loss or destruction without evidence of exfiltration.