Where an incident is opened, how it is handled through to root cause, and what is notified if a breach affects your personal data.