In this scenario, whom does Provider Y have the obligation to notify?

Company X has entrusted the processing of their payroll data to Provider Y. Provider Y stores this encrypted data on its server. The IT department of Provider Y finds out that someone managed to hack into the system and take a copy of the data from its server.

In this scenario, whom does Provider Y have the obligation to notify?
A . The public
B . Company X
C . Law enforcement
D . The supervisory authority

View Answer

Answer: C