Advanced 90 min 6-12 players Requires GDPR Pack
A breach has exposed personal data of EU customers across multiple member states, triggering GDPR's strict 72-hour notification requirement to Data Protection Authorities. This advanced tabletop exercise immerses your team in the complexities of European data protection law during a live incident, including determining the lead supervisory authority, navigating cross-border data transfer complications, and assessing whether the breach meets the threshold for individual notification. Participants will practice DPIA documentation, coordinate with your Data Protection Officer, and confront the reality of potential fines up to 4% of global annual revenue.