{
    "document_id": 11962,
    "page": 26,
    "width_pt": 595.32,
    "height_pt": 841.92,
    "rotation": 0,
    "pipeline_version": "paddleocr-vl-1.6+paul-48",
    "engine": "paddleocr_vl",
    "source_run_id": 12073,
    "item_count": 21,
    "counts_by_type": {
        "figure": 2,
        "footer": 2,
        "header": 1,
        "heading": 6,
        "list": 1,
        "list_item": 2,
        "text": 7
    },
    "build_ms": 1,
    "items": [
        {
            "id": "p26.1",
            "order": 1,
            "type": "figure",
            "bbox": {
                "l": 71.2656,
                "t": 841.2002,
                "r": 125.4947,
                "b": 798.9722
            },
            "text": "",
            "attrs": {
                "role": "page_header",
                "block_label": "header_image"
            }
        },
        {
            "id": "p26.2",
            "order": 2,
            "type": "header",
            "bbox": {
                "l": 208.7579,
                "t": 798.7323,
                "r": 384.6425,
                "b": 786.2559
            },
            "text": "Privacy and Data Protection Statement",
            "attrs": {
                "block_label": "header"
            },
            "level": 2
        },
        {
            "id": "p26.3",
            "order": 3,
            "type": "figure",
            "bbox": {
                "l": 472.9447,
                "t": 840.0005,
                "r": 522.1348,
                "b": 799.932
            },
            "text": "",
            "attrs": {
                "role": "page_header",
                "block_label": "header_image"
            }
        },
        {
            "id": "p26.4",
            "order": 4,
            "type": "heading",
            "bbox": {
                "l": 69.586,
                "t": 738.7494,
                "r": 354.4086,
                "b": 723.6337
            },
            "text": "Elapsed Time between Detection and Notification",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p26.5",
            "order": 5,
            "type": "text",
            "bbox": {
                "l": 68.8661,
                "t": 710.1975,
                "r": 525.4941,
                "b": 668.6894
            },
            "text": "The elapsed time, in hours, between the data breach having been recognized or detected by the organisation and the personal data breach notification being submitted to the supervisory authority."
        },
        {
            "id": "p26.6",
            "order": 6,
            "type": "heading",
            "bbox": {
                "l": 68.6262,
                "t": 655.2532,
                "r": 416.3161,
                "b": 641.0972
            },
            "text": "g. Description of the Nature of the Personal Data Breach",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p26.7",
            "order": 7,
            "type": "text",
            "bbox": {
                "l": 69.586,
                "t": 628.1409,
                "r": 471.265,
                "b": 613.5051
            },
            "text": "Describe the nature of the personal data breach, including, where possible:"
        },
        {
            "id": "p26.8",
            "order": 8,
            "type": "list",
            "bbox": {
                "l": 86.8625,
                "t": 600.3089,
                "r": 496.22,
                "b": 558.3208
            },
            "text": "",
            "attrs": {
                "item_count": 2
            },
            "children": [
                {
                    "id": "p26.8.1",
                    "order": 9,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.8625,
                        "t": 600.3089,
                        "r": 451.589,
                        "b": 585.673
                    },
                    "text": "Categories and approximate number of data subjects concerned",
                    "marker": "h."
                },
                {
                    "id": "p26.8.2",
                    "order": 10,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.8625,
                        "t": 572.4768,
                        "r": 496.22,
                        "b": 558.3208
                    },
                    "text": "Categories and approximate number of personal data records concerned",
                    "marker": "i."
                }
            ]
        },
        {
            "id": "p26.9",
            "order": 11,
            "type": "text",
            "bbox": {
                "l": 69.346,
                "t": 545.1246,
                "r": 524.0544,
                "b": 516.5727
            },
            "text": "The description should include the current understanding of how the breach occurred (e.g. unauthorised access, accidental) and any supporting information."
        },
        {
            "id": "p26.10",
            "order": 12,
            "type": "heading",
            "bbox": {
                "l": 68.6262,
                "t": 504.0963,
                "r": 341.6911,
                "b": 489.2205
            },
            "text": "j. Likely Consequences of the Data Breach",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p26.11",
            "order": 13,
            "type": "text",
            "bbox": {
                "l": 68.8661,
                "t": 476.0243,
                "r": 523.8144,
                "b": 447.4724
            },
            "text": "A description of what the likely effects on data subjects may be of the breach and the risks they may face, including potential timescales."
        },
        {
            "id": "p26.12",
            "order": 14,
            "type": "heading",
            "bbox": {
                "l": 69.586,
                "t": 434.5161,
                "r": 382.243,
                "b": 420.6001
            },
            "text": "k. Measures Already Taken to Address the Breach",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p26.13",
            "order": 15,
            "type": "text",
            "bbox": {
                "l": 68.8661,
                "t": 406.924,
                "r": 525.734,
                "b": 365.4158
            },
            "text": "Describe the actions that have been taken prior to the notification to lessen the impact of the breach, stop any further breaches and otherwise address the risk to data subjects."
        },
        {
            "id": "p26.14",
            "order": 16,
            "type": "heading",
            "bbox": {
                "l": 69.1061,
                "t": 352.2196,
                "r": 470.3052,
                "b": 338.5435
            },
            "text": "1. Measures Proposed to be Taken to Further Address the Breach",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p26.15",
            "order": 17,
            "type": "text",
            "bbox": {
                "l": 69.1061,
                "t": 324.1476,
                "r": 525.2541,
                "b": 283.1193
            },
            "text": "Describe the further actions that have been identified, but not yet taken, that may help to lessen the impact of the breach, stop any further breaches and otherwise address the risk to data subjects."
        },
        {
            "id": "p26.16",
            "order": 18,
            "type": "heading",
            "bbox": {
                "l": 69.346,
                "t": 268.9633,
                "r": 373.3647,
                "b": 255.2872
            },
            "text": "m. Reasons for Delay in Notification, if applicable",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p26.17",
            "order": 19,
            "type": "text",
            "bbox": {
                "l": 68.8661,
                "t": 241.1313,
                "r": 525.0142,
                "b": 185.4671
            },
            "text": "The GDPR requires that breaches of personal data that may result in a risk to the rights and freedoms of natural persons are notified to the supervisory authority without undue delay and, where feasible, not less than 72 hours after having become aware of it. If this timescale has not been met, the reasons for this should be stated here"
        },
        {
            "id": "p26.18",
            "order": 20,
            "type": "footer",
            "bbox": {
                "l": 70.7857,
                "t": 23.0334,
                "r": 82.7833,
                "b": 13.1962
            },
            "text": "26",
            "attrs": {
                "block_label": "number"
            }
        },
        {
            "id": "p26.19",
            "order": 21,
            "type": "footer",
            "bbox": {
                "l": 89.502,
                "t": 22.7935,
                "r": 120.6957,
                "b": 12.2365
            },
            "text": "Page",
            "attrs": {
                "block_label": "footer"
            }
        }
    ],
    "excluded_furniture": {
        "first": [],
        "last": []
    }
}