Free flowchart template
A data breach response flowchart shows what happens from the moment someone spots that personal information may have been exposed. Staff report and help contain it, the breach lead records it and assesses the risk of harm, and a senior manager decides whether the regulator and the people affected must be told, then the cause is fixed.
Updated November 2026 · Opens in Wikidoc as a process map · Free to use, don’t resell
Step 1
Open the template in Wikidoc. It opens as a process map you can edit.
Step 2
Put your breach lead's name in the lane, and the test and deadline from your privacy law in the reporting step's details.
Step 3
Add your insurer's and IT support's contacts to the containment and notify steps.
Step 4
Link the data breach response procedure and register to the steps.
The template opens as a process map, laid out with its lanes, steps and decisions, ready to edit.
Rename the lanes to your team’s roles, change the questions to match your rules, and add or remove steps.
Attach your SOPs and checklists to the steps, so whoever does the work can open the instructions from the map.
This works on the Free plan: up to 10 process maps from templates, free forever.
Procedure
1Report it straight away
2Contain it
3Record it
SOP
Report, contain, assess and notify when personal data is exposed.
PDF · Word
Register
Every data breach, the people affected, the risk and who was told.
PDF · Word · CSV
Flowchart
How serious it is decides who handles it, and how fast.
Opens in Wikidoc
Procedure
1Report it
2Contain it
3Assess the harm
SOP
Contain, assess and notify when client information leaks.
PDF · Word
About the role
Days 1–30, learn
Days 31–60, contribute
Document
What a new hire learns, does and achieves in three months.
PDF · Word
Obligations
Check for new or changed laws, license conditions, contracts and standards since last year
Update the obligations register, and give each new obligation an owner and what you do about it
Mark obligations that no longer apply, such as for a service you've stopped
Checklist
Once a year: obligations, policies, licenses, training, audits and actions.
PDF · Word · CSV
A diagram of what staff and managers do when personal information may have been exposed, from reporting and containing it to assessing the harm, notifying if required, and fixing the cause.
Usually a senior manager or privacy officer, on the breach lead's assessment. Name that person in advance, so a decision isn't held up while the deadline runs.
No. Each privacy law has its own test for which breaches must be reported, and by when. Put the rules that apply to you in the reporting step, and check them with your regulator.
Yes. It opens in Wikidoc on the Free plan, which includes up to 10 process maps from templates.
The operations management platform for SMEs that turns the way they work into a documented, repeatable, and teachable system.
