Data breach guides

What to do after a breach and what you are entitled to, checked against official government and regulator pages.

• United StatesGot a data breach notice? How to tell if it is legitHow to check a data breach letter or email is real before you act on it, and the steps that matter for what leaked: credit freeze, IRS IP PIN, passwords.
• United StatesHow fast must a company tell you about a data breach? (US)Washington and California give companies 30 days from discovering a breach to notify affected residents, with exceptions. What the law says and how often it is missed.
• United KingdomData breach compensation in the UK: your rightsCan you claim compensation after a data breach in the UK? Your right under UK GDPR, what the ICO can and cannot do, and how to complain without a claims firm.
• AustraliaData breach compensation in Australia: your rightsAfter a data breach in Australia: the Notifiable Data Breaches scheme, complaining to the OAIC (which can order compensation) and the new privacy tort.
• CanadaData breach compensation in Canada: your rightsAfter a data breach in Canada: what PIPEDA requires, complaining to the Privacy Commissioner, when the Federal Court can award damages, and fraud alerts.