Lesson 16 of 31
Approve the breach notices and confirm the Arabic text
What you will be able to do
This lesson is for the second Data Protection Officer, who approves. You will find the two breach notices in your Approvals inbox, read and approve the notification to the regulator, and approve the notice to the people affected, ticking the logged confirmation that its Arabic text is complete.
Before you start
- A colleague has drafted both notices and submitted them for approval, as in lessons fourteen and fifteen.
- You are signed in as a person who can approve breach notices and who did not draft or edit them.
Steps
- 1
Open Approvals
In the left menu, select Approvals. Two requests are waiting: Breach notification to the regulator, and Breach notice to affected data subjects. Each shows who the notice is for, the severity of the breach and the data protection regime.
- Select Approvals2
- 2
Select Open record
Select Open record on the first request. It opens the notifications page of the breach. Both notices show Awaiting approval, each with Approve and Return for changes.
- Select Open record
- 3
Read the regulator notice, then select Approve
Read the notification to the regulator section by section and check the facts against what you know of the incident. The Approval progress box shows the approval policy and its one step. When you are satisfied, select Approve under the notice.
- Select Approve
- 4
Add a comment and confirm
Add a short comment, which is kept with your decision in the audit trail. Then select Approve in the window. The notice changes to Approved, not sent.
- Type Comment:
Facts checked against the incident report. Approved to send. - Select Approve
- Type Comment:
- 5
Know when to return a notice
The other button, Return for changes, sends a notice back to the drafter. It asks you to say what needs to change. The drafter can then edit the notice and submit it again. Look at it on the second notice, but do not select it.

- 6
Read the Arabic check on the customer notice
On the notice to affected data subjects, read the English and the Arabic text. Under them, the check lists one passage of the Arabic text that is still in Latin script: the line of data categories that the drafter kept in English.
- 7
Select Approve on the customer notice
Select Approve under the notice. This time the window repeats the passage and shows a tick box: I confirm the Arabic text is complete. Approve in the window stays greyed out until the box is ticked.
- Select Approve
- 8
Tick the confirmation and approve
Tick I confirm the Arabic text is complete. The line underneath says that your confirmation is recorded in the notice's history with your name, the time and the passages listed. Add a comment and select Approve.
- Select I confirm the Arabic text is complete
- Type Comment:
The data categories stay in English, as on the customer account page. - Select Approve
- 9
See the confirmation on the notice
The check under the text now ends with Confirmed as complete, with your name and the time. Without that confirmation the notice could not be marked as sent or e-mailed.
- 10
Open the History
Select History at the bottom of the customer notice. It lists Approved and Arabic text confirmed complete, with your name, the time and the number of passages acknowledged. Both notices are now ready to be sent.
- Select History (6)
How to check it worked
Both notices show Approved, not sent. The notice to affected data subjects shows who confirmed the Arabic text and when, and its History lists Arabic text confirmed complete.
Common mistakes
- Ticking the Arabic confirmation without reading the listed passages. The tick is recorded with your name, the time and the passages, so you are confirming that each one is meant to stay as it is.
- Approving a notice you would rather see reworded. Select Return for changes and say what to change. The drafter can edit it and submit it again.
- Stopping after approval. Approved means the wording is agreed. The notice still has to be delivered and recorded as sent, which is the next lesson.
Check your understanding
1. The Approve button in the window stays greyed out for the customer notice. Why?
- A.You are not allowed to approve
- B.The confirmation that the Arabic text is complete has not been ticked
- C.The regulator must approve first
- D.A comment is required
Show answer
Answer: B. The confirmation that the Arabic text is complete has not been ticked
When the Arabic text still has passages in Latin script, the approver must tick the confirmation before the notice can be approved.
2. Who can approve a breach notice?
- A.The person who drafted it
- B.Anyone who edited it
- C.A person with approval rights who did not draft or edit it
- D.The vendor
Show answer
Answer: C. A person with approval rights who did not draft or edit it
The approval policy is strict maker and checker: whoever drafted or edited the notice cannot approve it.