A data breach is a security incident leading to the destruction, loss, alteration, disclosure of or unauthorized access to personal data. The organization documents it and, if it presents a risk to people, notifies the supervisory authority within 72 hours, and informs the people if the risk is high.
Example
An unencrypted laptop containing a customer file is stolen.