What is a personal data breach?

A personal data breach specifically affects personal information as defined by the relevant legal framework. Under the GDPR a breach is defined as a “breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data’’. By contrast a security incident may affect wider types of data including personal data. While all breaches qualify as incidents, not every incident will amount to a personal data breach. For an introduction to data breaches including links to further more detailed resources see [here] and find the EDPB's guidance on breaches here.