Process · Quality & security
When it happens: assess quickly, notify correctly.
An email sent to the wrong person, a lost laptop, a cyberattack: under the FADP, data security breaches must be reported to the FDPIC as soon as possible if they pose a high risk to the people affected — under the GDPR within 72 hours. easydoo makes sure that, in that moment, everyone knows what to do.
The situation
Where things get stuck today
-
Time pressure without a plan
In an emergency, people improvise: who needs to be informed, who decides on notification?
-
Gut-feeling assessment
Whether there is a high risk is decided without structured criteria and without documentation.
-
Gaps in documentation
Incidents that do not have to be reported must also be documented — something that is often overlooked in day-to-day work.
Process flow
From report to documentation.
A prepared process that holds up under time pressure.
- 1
Report
Employees report the incident via a simple form; the data protection officers are informed immediately.
- 2
Assessment
The type of data, number of people affected and risk are assessed against clear criteria, with reasons given.
- 3
Notification
If notification is required, it is prepared, approved and submitted to the FDPIC — the deadline is visible.
- 4
Measures
Immediate and follow-up measures are assigned; those affected are informed if necessary.
- 5
Documentation
Incident, assessment, notification and measures remain fully documented.
How easydoo helps
What easydoo brings to the table.
-
Immediate reporting
One form for all employees — incidents get reported instead of hushed up.
-
Deadline in view
The time the incident became known is recorded; the time remaining is visible at all times.
-
Structured risk assessment
Criteria on type of data, scope and consequences lead to a traceable decision.
-
Notification templates
Prepared texts for the notification to the authority and for informing those affected save time in an emergency.
-
Crisis team in the case
Data protection, IT, communications and management work together in the same case.
-
Complete documentation
Every incident is documented — including those that do not have to be reported, as the law requires.
Example
What it looks like day to day
An employee notices that she has sent a list of customer addresses to the wrong recipient. She reports the incident immediately. The data protection officer assesses the risk as low based on the criteria, asks the recipient to delete the list and documents the decision and measure — all within an hour and traceable at any time.
Your benefits
What changes.
-
Ready to act
The process is prepared for an emergency.
-
On time
The time left until notification is always visible.
-
Justified decisions
The risk assessment is traceable.
-
Documented in compliance with the law
Every incident, whether reported or not.
Getting started
Productive within a few weeks.
You do not start from scratch: the process is ready as a template and is tailored to your organisation together with you.
-
Understand the process
In a conversation, we clarify how the process runs today, who is involved and where it gets stuck.
-
Adapt the template
Fields, steps, responsibilities and deadlines are tailored to the way you work.
-
Roll out and expand
The team starts with the process — further processes are added when you are ready.
Not just a standard demo.
Your processes are the starting point.
We get to know your workflows and challenges. Then we show you concretely what your processes can look like in easydoo. A short conversation is all it takes to get started — free of charge and without obligation.
- 01
First conversation
We want to understand how your processes run today, what challenges exist and which systems you use.
- 02
Preparation
Based on your processes, we prepare concrete examples that show how easydoo can support you.
- 03
Second conversation
We show you what your processes can look like in easydoo and discuss the possibilities together.