ClientEarth Data Breach Incident Management Policy

Every care is taken to protect information and to avoid a security incident, especially where the result is a data breach when personal information is lost or disclosed inappropriately to an unauthorised person. In the unlikely event of such a information security incident, it is vital that appropriate action is taken to minimise any associated risk as soon as possible. We will investigate all information security incidents classified as serious using a set plan and follow a Breach Management Plan in the event of a data breach.