# Breach severity assessment
> Source: https://legalcode.md/skills/legalcode-breach-severity-assessment | [HTML version](https://legalcode.md/skills/legalcode-breach-severity-assessment)

Run multi-jurisdiction personal-data breach severity assessments for legal/privacy and incident-response teams.

Run multi-jurisdiction personal-data breach severity assessments for legal/privacy and incident-response teams. Use when triaging a security incident to decide whether it is notifiable, who must be notified, when clocks start, and how to produce a defensible regulator-ready and executive-ready decision package. Covers global incidents, parallel regulator duties, confidence-scored findings, and auditable timeline logic.

Use this skill to produce a defensible breach-severity decision and notification action plan for incidents involving personal data. This skill does: - Normalize incident facts and clock start dates. - Assess harm likelihood and legal notification triggers across jurisdictions. - Classify severity and required urgency. - Produce finding-level remediation and evidence requirements. - Generate an auditable decision package with confidence scoring. This skill does not: - Replace forensic root-cause analysis. - Replace legal privilege strategy or litigation counsel. - Promise regulatory outcome. - Resolve sector-specific reporting regimes in full (telecom, finance, health, critical infrastructure) without explicit localization. This skill is jurisdiction-agnostic and must be localized per incident. | Jurisdiction | Baseline trigger/timing anchor | Source status | |---|---|---| | EU (GDPR) | Art. 33 authority notice within 72 hours where feasible once aware, unless unlikely risk; Art. 34 individual notice without undue delay for high risk | VERIFIED | | UK (UK GDPR) | Retained Art. 33/34 framework, with ICO as supervisory authority | VERIFIED | | Australia (Privacy Act Part IIIC) | Assess suspected breach expeditiously and within 30 days; notify OAIC/individuals as soon as practicable after eligible-breach threshold | VERIFIED | | Brazil (LGPD + ANPD Res. 15/2024) ...

## Jurisdictions

Global



---
*Legalcode -- legalcode.md*