CLAIM-2026-09-18-07

Article 4(12) GDPR defines a personal data breach to include alteration of personal data, not only unauthorised disclosure or access.

Why it matters

Most incident playbooks are built for confidentiality. Alteration has been in the definition since 2018 and is the harder limb to reconstruct after the fact.

Sources

• eurlex2016regulatio