Skip to main content

Breach Assessment Prep

Organize the facts of a suspected breach for assessment. Notifiability is a human decision.

The prompt
For the suspected personal-data breach described here, organize the facts for assessment: [what happened, when discovered, data categories and approx numbers involved — no personal data].
- Timeline of events
- Data and data subjects affected (categories/volumes)
- Containment actions taken
- Open questions for the assessment

Structure only. Copilot does NOT decide whether this is notifiable, to whom, or by when — the DPO assesses notifiability and timing against the applicable law.

How to use it

  1. 1Select Copy the prompt above.
  2. 2Paste it into Microsoft 365 Copilot.
  3. 3Replace anything in brackets with your own detail, then send it.

Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.

Written for

Data Protection Officer, Privacy Manager, Incident Lead