What happens if there is a data breach?

Wyser's DPA contains obligations relating to data security incidents and requires Wyser to notify the customer without undue delay where Wyser or a subprocessor suffers a relevant personal data breach.

The customer remains responsible for assessing the incident from the data controller perspective and determining whether notification to the ICO or affected individuals is required.

Clients should use their normal incident management and data breach procedures.