ITER/FrameworkFramework for the reporting acts an insider event obliges

Type

A set of obligations. Two events are the same type when they trigger the same obligations, or when the facts those obligations require are established by materially different means. An event can be more than one type, and the record carries the union.

Condition

A circumstance that switches obligations on: what the organization is, and where. One condition switches them off, where a sector-specific Union act covers the same ground and its requirements are at least equivalent in effect, the general one does not apply.

Act

One reporting act. What to do, whom it is owed to, the term, the point the term runs from, what has to be established first, and the consequence the source itself states.

Term

The interval an instrument states. Twenty-four hours, seventy-two hours, one month. They are the same across the Union; what differs is the point they run from.

Anchor

The point a term runs from, on the scale below. This is the part that moves.

Stage

Where an act attaches its clock, on one scale with four points: occurrence, when the event happened; detection, when something was noticed; awareness, when the organization is taken to know a significant incident occurred, which is where the Directive attaches; and determination, when someone inside decides it qualifies. Five national acts attach earlier than the Directive and two attach later, and the two directions are not the same problem: detection is checkable from a timestamp, determination is fixed by the organization's own record, and nothing outside it establishes when it happened.

Awareness

The moment the organization is taken to know, and the point every term runs from, directly or through the act before it. No instrument defines it; the EDPB reads it as a reasonable degree of certainty that a breach has occurred. It is a standard and not a declaration: a fact about what the organization knew, fixed by the standard and not by the organization. What the organization fixes in advance is the evidence at which it will treat the standard as met, and who establishes that it has been.

Record of awareness

The organization's own account of when the standard was met, made by the person named to establish it. It is evidence of the moment and does not create it. A record made after the standard was met is a late record, and the term has run from the standard.

Jurisdiction

A state in which the record names a body a report is owed to. Every count on these pages uses this definition: the Member States of the Union, the three states of the European Economic Area in which the instruments apply, and the two states outside the Union where what binds instead is read as an equivalent.

Reading

A conclusion ITER draws from a source and does not attribute to it. It is a field of its own in the record, and on the page it is marked as ITER's reading, apart from what the source states.

Unless

The condition on which a duty does not arise. It is drawn beside the act it belongs to, because it decides whether the row applies at all.

Layer

Which of three things a row is. An obligation is a Union instrument and is the same everywhere. An implementation is what one Member State did with it, and may move a term or the moment it runs from. A procedure is the machinery for discharging it: which body, which portal, which credential, and is national in every case. When anything here says the instruments are the same across the Union, it is speaking about the first.

Evidence

What holds a row up, computed by the build from the kinds of source it cites. Binding means it was read in the text that binds. Reported means it was read in an authority’s account of that text. Provisional means it rests on something said about an instrument that does not yet bind. Unresolved means no settled position is recorded. The weakest source a row cites decides its mark.

Calibration

Where an instrument leaves a test open, the record carries the case in which a body applied it. It supplies no threshold of its own.

Divergence

Where a national act moves a term, or the point a term runs from. Twelve of the thirty transpositions read here move one, and the row says which.

Standing

What a source is: the act itself, read in a gazette, or an authority's account of it. Both are recorded and they are not equivalent.

Channel

Where a notification is physically sent: a portal, a form, an address. The instruments name a recipient and almost never this.

Kind

What a source is, which sets how long it may go unread before it has to be looked at again. The build computes it and stops when a source is long past due.

EDPB

The European Data Protection Board: the body in which the Union's supervisory authorities sit. Its guidelines set the standard for when an organization is aware of a breach, and its worked cases are the decided cases this record calibrates on. Not the board of the organization.