CapGRC
Free tool

Serious injury test

See whether the factors of a privacy incident point toward notice to the Commission.

1. Sensitivity of the information
2. Possible malicious uses
3. Anticipated consequences for the persons
4. Probability of harmful use

This test uses the elements set out for concluding that there is a risk of serious injury. It helps prepare the register. It does not replace your organization's assessment, or legal advice.