Following an amendment of the Personal Data Protection Act (Wbp), the reporting of data leaks will be mandatory as of 1 January 2016. Under this statutory duty to report, companies that process personal data must report data leaks to the Data Protection Authority. More information on the policy guidelines and the statutory duty to report is available on the DPA's website.
Vattenfall and your company have concluded an agreement regarding the processing of personal data. This agreement requires your company to notify Vattenfall immediately in the event of a security breach or data leak. In such an event, you are also required to assist with notifying the customers or individuals concerned in an appropriate manner.