When data is lost, it’s called a data breach.

There are many ways data can be “lost”.

It could be anything from data that’s accidentally destroyed, to data that an unauthorised person has accessed.

The GDPR is only concerned with identifiable information on living people. It calls this “personal data”.

If a company loses files that don’t have personal data, the GDPR wouldn’t consider that a data breach.