Dealing with a security breach, even in these unusual times, is often the toughest aspect of a data protection professional’s job. As we are heading toward the second anniversary of GDPR, we thought it might be interesting to share some of the lessons that we have learned from handling security breaches across the EU. We have also done some work looking at public cases and we have included examples from around the EU to illustrate the points we are making. In some cases, we have used pre-GDPR cases where we think they are instructive. We have boiled all of this down to ten top tips for handling a data breach. Most of this is common sense but you can use these tips as a checklist to make sure your processes are robust.