While the primary purpose of the document is to ensure compliance with the law, the goes a step further. It is not just a rulebook; it is an optimization manual.
The 2018 version clarifies terms such as "Personal Data Breach," "Sub-processor," and "Relevant Regulator." Notably, it distinguishes between a confirmed breach and a suspected breach , which triggers different levels of response. mbma 2018 pdf