PRV-260Privacy & Data Protection

Breach Notification Decisions Under Pressure

What you leave with

A breach decision tree across GDPR 72-hour, HIPAA and US state timelines, risk-of-harm tests, and notification templates for regulators, individuals and customers.

Same obligation, two realities

Early-stage and SMEyou decide and you write the letter.
Enterpriseincident commander, outside counsel, cyber insurer, and multi-jurisdiction sequencing.

How the course runs

  • The obligation: where the responsibility comes from, cited by section.
  • Two realities: how it is met in a small organisation and in an enterprise.
  • The method: step-by-step practice with templates and edge cases.
  • Paired labs: complete the one matching your work, read the other.
  • Artefact and assessment: submit the artefact; a rubric and a short scenario quiz decide the certificate.