17. If an institution reports a second breach during the last 12 months that concerns the same …

If an institution reports a second breach during the last 12 months that concerns the same client or group of connected clients as the first breach, the competent authority may decide that the event cannot qualify as a rare one. Equally, if an institution reports a second breach during the last 12 months that stems from the same origin as the first breach, the competent authority may decide that the event cannot qualify as a rare one.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/