Data, security and AI obligations: situations

This page lists the situation notes in data, security and ai obligations — each one answers a specific moment when something has gone wrong or a decision is due, with the first step, who decides, and what it costs to be wrong. Pick the one that matches your position.

All situations in this practice (32)

• When a breach is discovered: what it costs to be wrong
• When a breach is discovered by a customer: what to do first
• When a customer demands an audit: what it costs to be wrong
• When a customer demands an audit: what to do first
• When a data set is bought without provenance: what to do first
• When a joint controller relationship: what to do first
• When a regulator asks about automated: what to do first
• When a subprocessor is added: what it costs to be wrong
• When a subprocessor is added mid-term: what to do first
• When a supervisory authority sends: what it costs to be wrong
• When a supervisory authority sends a first: what to do first
• When a transfer mechanism: what it costs to be wrong
• When a transfer mechanism is questioned: what to do first
• When a vendor questionnaire asks about: what to do first
• When a vulnerability disclosure: what it costs to be wrong
• When a vulnerability disclosure is published: what to do first
• When access requests arrive: what it costs to be wrong
• When access requests arrive in volume: what to do first
• When an AI feature changes: what it costs to be wrong
• When an AI feature changes the data flow: what to do first
• When an employee monitoring tool is deployed: what to do first
• When an incident report deadline: what it costs to be wrong
• When an incident report deadline is running: what to do first
• When an incident touches several countries: what to do first
• When children's data appears in the product: what to do first
• When cloud region changes after signature: what to do first
• When logs are kept longer than: what it costs to be wrong
• When logs are kept longer than the policy: what to do first
• When records of processing: what it costs to be wrong
• When records of processing are incomplete: what to do first
• When security duties reach you as: what it costs to be wrong
• When security duties reach you as a supplier: what to do first

Back to the practice overview: Data, security and AI obligations.