Definition: Any instance in which there is an unauthorized release or access of personally identifiable information (PII) or other information not suitable for public release.

Source: Taken from Privacy Technical Assistance Center (PTAC), Data Breach Response Checklist

DaSy Framework Component: Data Governance and Management