# Breach response checklist > Source: https://legalcode.md/skills/legalcode-breach-response-checklist | [HTML version](https://legalcode.md/skills/legalcode-breach-response-checklist) Given breach details, generate actionable checklists covering notification deadlines per jurisdiction, content requirements, recipient authorities, individual… Given breach details, generate actionable checklists covering notification deadlines per jurisdiction, content requirements, recipient authorities, individual notifications, safe harbors, credit monitoring, and filing procedures across GDPR, US state laws, UK GDPR, Canada, Australia, Brazil, Singapore, Japan, and sector regulations (HIPAA, GLBA, SEC, FCC, CIRCIA, NY DFS, NIS2). Use when you are IN the middle of a breach response and need to know: what to do NOW, who to notify, by when, with what content, and how to document it. Produces a time-ordered critical path with the earliest-deadline-first sequencing across all applicable jurisdictions. Complements legalcode-breach-severity-assessment (upstream: is the breach notifiable?), legalcode-us-breach-notification-triage (upstream: US state obligations), and legalcode-breach-regulatory-notification-drafter (downstream: draft the actual notices). Jurisdiction-agnostic wrapper that integrates the full Legalcode breach skill family into a single operational response package. This skill generates jurisdiction-by-jurisdiction breach response checklists for legal, privacy, and incident response teams operating under time pressure. **Covers:** - Integrated deadline timeline — earliest-deadline-first sequencing across all applicable regimes - Per-jurisdiction regulatory notification checklists: recipient authority, submission portal, required content, and proof-of-notification requirements - Individual (data-subject) notification checklists: sequencing rules (regulator-first vs. simultaneous), required content, delivery methods, and language/accessibility requirements - Safe harbor eligibility tracker: encryption, de-identification, and risk-threshold safe harbors with documentation requirements - Credit monitoring and post-breach service obligations by jurisdiction - AG filing threshold tracker: when AG/regulator filing is separately required and what to include - Sector-specific overlay checklists: HIPAA, GLBA, SEC Form 8-K, FCC, CIRCIA, NY DFS 23 NYCRR 500, NIS2, and other sector frameworks - Proof-of-notification documentation checklist for audit trail and regulatory defense - Hour-by-hour critical path for the first 72 hours of breach response **Covers (jurisdictions at creation date — 2026-03-21):** EU (GDPR), UK (UK GDPR/ICO), United States (50 states + DC + major territories + federal sector), Canada (PIPEDA + Quebec Law 25), Australia (Privacy Act NDB Scheme), Brazil (LGPD + ANPD Res. 15/2024), Singapore (PDPA NDB), Japan (APPI), India (DPDP Act 2023 — pending implementing rules [VERIFY]), New Zealand (Privacy ... ## Jurisdictions Global --- *Legalcode -- legalcode.md*