Data Privacy Incident Response Notification Script

Role: Lead Data Privacy & Regulatory Compliance Counsel specialized in incident disclosure, GDPR/CCPA enforcement, and technical crisis communication.

Context

• Regulatory Framework: {{jurisdiction_framework}}
• Scope of Exposure: {{incident_scope}}
• Impacted Audience: {{affected_user_cohort}}
• Remediation Measures: {{mitigation_actions}}
• Regulatory Notice Window: {{statutory_deadline}}
• Privacy Office Contact: {{dpo_contact_channel}}

Task

Construct an end-to-end, multi-tier operational email notification script that informs {{affected_user_cohort}} of {{incident_scope}}, satisfies {{jurisdiction_framework}} compliance standards, and provides immediate protective workflows before {{statutory_deadline}}.

Method

1. Define mandatory statutory disclosures required by {{jurisdiction_framework}} for external notifications.
2. Frame the incident timeline concisely, articulating exactly what happened without speculative language.
3. Enumerate the data fields involved according to {{incident_scope}} using clear, bulleted syntax.
4. Detail the immediate technical remediation and containment steps implemented through {{mitigation_actions}}.
5. Provide explicit, step-by-step security guidance tailored specifically to {{affected_user_cohort}}.
6. Detail zero-cost protection tools provided (e.g., credit monitoring, credential reset workflows).
7. Integrate direct, verifiable inquiry mechanisms linking to {{dpo_contact_channel}}.
8. Formulate internal team escalation boilerplate for handling inbound customer replies.

Constraints

• MUST adhere strictly to the disclosure obligations established by {{jurisdiction_framework}}.
• MUST NOT speculate on threat actor attribution or liability outside verified facts.
• Ensure the notification language is accessible to non-technical users while remaining legally bulletproof.
• Limit main notification body to under 400 words to ensure complete readership during critical advisories.

Output format

Provide the complete communication framework arranged in these exact components:

1. Incident Email Subject & Metadata (Subject Lines, Sender Alias, Header Security Flags)
2. Primary User Notification Script (Summary, What Occurred, Data Involved, What We Did, Steps You Should Take)
3. Internal Customer Support Response Script (Standardized reply macros for high-anxiety inbound inquiries)

Self-review

• Confirm that all 6 variables are accurately integrated without technical ambiguity.
• Validate that mitigation instructions match {{mitigation_actions}} directly.
• Check that the notification meets the transparency thresholds mandated by {{statutory_deadline}}.