How to use the new Online Data Breach Reporting Form
The Online Data Breach Reporting Form is being updated with a slightly different format.
This should not affect how you use the form. It will look a little different, but you will still be asked to provide the same information. The updated format will be available from Tuesday 16 June.
You can find the form on Connects by using the search bar and typing “data breach” and enter. This will take you directly to the form.
Helpful Tips
A data breach is when personal information is accidentally or unlawfully lost, changed, shared, accessed or disclosed without permission.
Who should you contact if you think a breach may have occurred?
- Your line manager
- The Data Protection Team at dataprotectionofficer@north-ayrshire.gov.uk
All breaches should be reported using the Online Data Breach Reporting Form on Connects.
If there is an immediate risk of harm, or a high number of individuals may be affected, you must also follow up the online report by emailing dataprotectionofficer@north-ayrshire.gov.uk.
How long do you have to report a breach?
You should report it immediately. The Data Protection Team has a limited time to assess the breach and decide whether it needs to be reported to the Information Commissioner’s Office. If the breach is reportable, it must be reported within 72 hours of becoming aware of it.
What is the Information Commissioner’s Office?
The Information Commissioner’s Office is the UK’s independent regulator for information rights and data privacy. It oversees data protection legislation, including the UK GDPR and the Data Protection Act 2018.
What is the most common data breach?
One of the most common data breaches is sending an email to the wrong recipient.
Before sending information, use the STOP, THINK, CHECK before SEND approach to make sure the recipient details are correct. This applies to both paper and electronic information.
Use BCC when sending bulk emails to help protect recipients’ personal information.
Published June 15, 2026
