Data incident notification helps public organisations communicate appropriately when information has been lost, exposed, corrupted or misused. Its gold standard is not sending the fastest generic notice; it is accurate, timely and responsible communication supported by incident response.
The gold standard is a repeatable operating capability: define the purpose, use reliable evidence, protect important handoffs and verify the outcome.
Establish the Facts
Identify what happened, which information may be affected and what remains uncertain. Avoid premature claims of complete containment.
Follow Applicable Notification Requirements
Legal, regulatory and organisational obligations may differ by incident and entity. Use authorised guidance and decision-makers.
Prioritise Protection
Contain the incident and take appropriate steps to reduce harm while notification decisions are made.
Explain Practical Implications
Affected people may need understandable information about the incident, relevant risks and available support.
Coordinate Internal and External Communication
Security, legal, operational and public-facing teams need consistent facts and responsibilities.
Update as Evidence Changes
Early information may be incomplete. Provide corrections or further notices when appropriate.
Break-Test: An Initial Notice Understates the Scope
Can the agency correct the account promptly and explain what changed?
Connected Knowledge
See Data Error Impact Assessment, Incident Learning and Cyber Security Agency.
The Operating Loop
Define the problem, assess current conditions, choose suitable checks, assign responsibility, act on findings and verify improvement.
What to Measure
Use measures specific to the domain: experimental validity, clinical response, sensor representativeness or incident communication quality. Examine recurring failures and consequences rather than activity counts.
How to Reach the Gold Standard
Follow a real case, test a plausible failure and correct the weak connection. Dependable execution and sustained improvement define the standard.