Detect, assess and respond
Interdo AB has procedures for detecting, investigating and handling incidents in IdRelay. An incident may involve availability, incorrect data or unauthorised access, for example.
Our process
- Identify the incident and the systems and data affected.
- Assess its scope and possible consequences for customers and recipients.
- Prioritise and implement measures to limit the impact.
- Communicate with those affected and document the incident.
- Investigate the cause and follow up on measures that may reduce the risk of recurrence.
If personal data is affected
As a data processor, we must inform the customer acting as data controller without undue delay when we become aware of a personal data breach. The customer needs to assess whether the breach must be reported to IMY and whether data subjects need to be informed.
As a general rule, a breach that must be reported to IMY should be reported within 72 hours of the data controller becoming aware of it. Not every incident requires a report. Read IMY’s guidance on personal data breaches.
Contact us
Do you suspect an incident affecting your account? Contact support@interdo.com or 035-21 28 30.