Definition
A breach notification is the formal communication to affected parties when a security incident compromises sensitive data. This process typically involves informing individuals whose personal information, such as names, addresses, or financial details, may have been exposed. In practice, organizations must adhere to specific legal and regulatory requirements, often dictating the timing and content of these notifications. Understanding breach notification is crucial for maintaining trust, complying with laws like GDPR or CCPA, and mitigating reputational damage after a security event. For instance, a healthcare provider must notify patients if their medical records are accessed without authorization. This differs from an incident report, which is an internal document detailing the breach itself. Knowledge of breach notification is tested on certifications like Security+ and CISSP.