Data breaches are now a case of when, not if

It is often quipped that it is not a question of if, but when a business will face a data breach.

Increasingly, therefore, there is an urgent need for businesses to know exactly when they are required to report a breach when it occurs.

The first-ever law mandating that a data breach is reported took root in California 16 years ago. Today, all 50 states in America, along with all European Union (EU) member states, have compulsory breach notification laws.