Incident response

• Immediate containment at OMB's expense as soon as an incident is confirmed, without waiting for the investigation to conclude.
• Customer notification within 72 hours at most from confirmation, covering the nature of the incident, the data involved, recommendations for data subjects and the actions already taken.
• Accompaniment through closure, with a final report on causes and the measures adopted to prevent recurrence. If the law requires you to notify data subjects, we prepare that notice with you and, if you so request, send it on your behalf at no additional cost.
• Misuse is not a security incident. Should an incident arise from processing outside your instructions, it constitutes a breach attributable to OMB with full liability, not a mere notification. So it is subscribed in our data processing agreements.

Print this page