Draft a data-breach incident response plan
Key facts
- Human involvement
- YellowClose supervision
- How AI is used
- Produce a plan covering detection, containment, assessment, notification and post-incident review, with a RACI and template notices.
- What the lawyer must review
- Align the plan to every reporting stream that applies
- Include the privacy regulator, cyber authority, insurers and sector rules
- Do not rely on one 30-day clock
- Written for / version
- US
Open a jurisdiction version of this task to see which instruments apply: US
Who does what
| Role | What they do |
|---|---|
| Assistance | Potential support includes preparing preliminary structure or wording and identifying points for review. Confirm the tool’s capability and permitted scope. |
| Lawyer | Set the scope, supervise the work closely, verify every part relied on, resolve omissions and exceptions, and approve the exact output. |
Checklist
- Open each relied-on authority independently. Confirm its existence, current status, proposition and any quotation or pinpoint reference.
- Confirm that the actual tool, feature and processing terms permit use of this information, including access, retention, training and disclosure conditions.
- Verify the applicable jurisdiction and the version of each relevant law, rule or instrument in force at the material time.
- Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
- Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.