Module Learning Objective

distinguish urgent risks from routine handling

1. Regulatory Concept & Core Standards

This video's topic is identifying urgency and preserving material. By the end, you should be able to distinguish urgent risks from routine handling. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Initial classification identifies the proper procedure and prevents unjustified delay. One event may concern several legal regimes. Classification follows substance and may change with new information. Referral does not justify unrestricted sharing.

Urgency may arise from danger to people, disappearing evidence or continuing harm. A reporting channel does not replace emergency services. Preservation remains subject to authority and data protection. Urgency does not justify unrestricted access.

Apply the following rule: Section 4(4) permits direct external reporting. Under section 6, competence follows the relevant statutory supervisory or offence-procedure powers. No authority handles every subject. Public disclosure requires the separate section 12 conditions. Using a technology provider does not turn an employer channel into an official external channel.

2. Practical Implementation & Procedure

Assess the danger and time sensitivity. Involve the competent person or authority. Preserve relevant material lawfully and record reasons, separating protection from a final guilt finding. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A report states relevant logs will be deleted tomorrow. The designated team checks its authority and suspends the relevant deletion through a documented process. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does urgency authorise copying every database without limits? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Act within necessary scope and proper authority. Preservation and harm reduction need reasons even when urgent.

One mistake to avoid is: using urgency to remove data-protection limits.

Now apply the national rule to a second decision. An advice page is listed as the only recipient for every report. What needs verification?

Check the recipient’s powers over the particular breach and official reporting method. Advice, intake and investigation may differ. Section 4(4) permits external reporting without prior internal reporting. Public-disclosure conditions remain separate.

National Legal Framework: Rikkumisest teavitaja kaitse seadus, transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.