Disclosing security breaches in SMEs

For small and medium-sized enterprises (SMEs), the need to protect regulated data is a big enough headache. Now they must add to the pain with the coming decree under the new Data Protection Framework that when a breach occurs and such data leaks into the public domain, the breach needs to be disclosed to the Data Protection Office (DPO).