Skip to content
Contact support
  • There are no suggestions because the search field is empty.

How to Document a Security or Data Incident

Use the Incident Log to document breaches or data security incidents — whether internal, reported by a vendor, or discovered during audits.

How do I register an incident?

To register an incident in .legal, navigate to the Incident Log, click Create Incident, and complete all required fields — including type, date/time, description, affected system and persons, data category, and internal response. Accurate, timely registration supports your ongoing GDPR and NIS2 obligations and ensures a reliable audit trail.

Steps to register an incident

  1. Go to Incident Log.
  2. Click Create Incident.
  3. Fill in the following fields:
    • Type and date/time
    • Description and system affected
    • Person(s) affected
    • Category of data involved
    • Internal response
  4. Click Save to register the incident.

Screenshot of the Incident Log with the Create Incident button highlighted

Why does incident documentation matter?

Well-documented incidents support your compliance with GDPR Articles 33 and 34, fulfil NIS2 notification obligations, and build an internal record that strengthens your organisation's ongoing compliance work and preparedness.

Related Articles