Yes – please see the Data Breach Process section on our website:
https://www.investorsinpeople.com/personal-data-breach-procedure/