Notification assessment pack

What does the notification assessment pack produce?

Assess source-bound your notification duties and retain explicit notification decisions.

Use the exact local files and task-specific inputs listed below. Preparation and review stay in this browser. Inspect all findings before preparing the finalized pack.

What do you need before you start?

• Define the authorized source population and your review rules.
• Keep the unchanged original files and record the snapshot and exclusions.
• Review missing and invalid inputs before preparing the finalized pack.

What information do you enter?

Select the actual local sources and freeze the task-specific inputs below. Keep source files and complete findings private.

• Reference. Stable internal reference for this incident preparation version.
• Working pack version. Exact current customer document version.
• Organization. Actual organization owning this incident or exercise.
• Your jurisdiction. Exact jurisdiction and entity scope approved for this incident. No legal applicability is inferred.
• Incident ID. Exact incident or exercise identifier shared by the task rows.
• Responsible reviewer. Customer-authorized incident reviewer and decision owner.
• Review timestamp. Exact timestamp with seconds and a confirmed UTC offset.
• Approved incident scope. Included events, populations, systems, products, exclusions and uncertainty.
• Scope approval reference. Customer approval for the selected incident boundary.
• Approved preparation method. Your exact procedure or assessment method version.
• Method source reference. Actual local file containing the approved method.
• Approved method source locator. Exact location supporting the selected method.
• Method approver. Customer-authorized approver for this procedure version.
• Method approval timestamp. Exact approved instant no later than the review timestamp.
• Incident population. Selected records or a declared complete supplied population.
• Declared event count. Required for your declared complete event population.
• Declared duty count. Required for your declared complete supplied duty population.
• Notification assessment and duty decision pack event inputs. Readable typed task rows. Exact IDs link incidents, original sources, operative rules, approvals and outputs.
• Duties. Readable typed task rows. Exact IDs link incidents, original sources, operative rules, approvals and outputs.
• Assessments. Readable typed task rows. Exact IDs link incidents, original sources, operative rules, approvals and outputs.
• Submissions. Readable typed task rows. Exact IDs link incidents, original sources, operative rules, approvals and outputs.
• Report Fields. Readable typed task rows. Exact IDs link incidents, original sources, operative rules, approvals and outputs.
• Evidence. Readable typed task rows. Exact IDs link incidents, original sources, operative rules, approvals and outputs.
• Actions. Readable typed task rows. Exact IDs link incidents, original sources, operative rules, approvals and outputs.

What you can download

Every result must identify its supplied facts, assumptions and unresolved items.

Fictional review report (PDF). Editable review (DOCX). Complete fictional pack (ZIP). Requires tailoring and responsible review. Samples use the finalized renderer.

How does the notification assessment pack work?

1. 1
   Select the actual sources

   Reference. Stable internal reference for this incident preparation version.

2. 2
   Freeze the review rules

   Reconcile each exact reviewed duty with its approved applicability assessment, trigger evidence, recipient, reporting stage and submissions. Compare explicit approved clock assumptions with supplied dispatch and receipt records. Unknown duties, exclusions without a basis and contradictory notification decisions remain visible.

3. 3
   Inspect complete findings

   Review all source-linked results and unresolved items. Free JSON and CSV preserve complete results.

4. 4
   Keep recoverable work

   Exact draft strings and source bytes save locally. Strict restore checks tool identity, typed row structure, source hashes and retained history before replacing browser work. Earlier generic work and the prior checkpoint remain downloadable.

5. 5
   Prepare the finalized pack

   Prepare eight core files, including the private ICS calendar, and exact selected attachments, then download them free. Review the fictional sample below.

Method and sources

Apply the steps above to the supported inputs. Use the listed source sections to review the rule basis, assumptions and limits.

• Data Breach Response. A Guide for BusinessSupports this named evidence-preparation structure. Actual operative criteria, policy terms, incident facts and approvals remain exact customer inputs. Secure operations, preserve factual evidence, determine applicable requirements and prepare communication for affected audiences. Exact state, federal, contractual and policy duties must be supplied and reviewed for the actual incident. This guide does not replace an operative source or decide the reportable population.Federal Trade Commission. Reviewed 2026-10-09.

Common questions

What still needs review?

This working pack organizes your supplied incident facts, original evidence, approved rule versions and recorded decisions. It does not decide legal applicability, notification duties, statutory deadlines, insurance coverage, AI seriousness, product exploitation, authenticity or sanctions clearance. No report, message, authority filing or payment is sent. Original files remain unchanged and browser-local. Original files are not saved to the cloud.

At most 500 rows and 200000 characters per table, 20 files, 10 MB each and 25 MB total. Complete input metadata is bounded to 900 KB. Exact JSON source comparison supports source files of at most 1 MB.

Calendar calculations require explicit approved units, counting rules, dates, weekday exclusions and confirmed offsets. No daylight-saving rule or operative legal clock is inferred.

Formal previews are bounded. Complete accepted task rows, decision drafts, original timestamps, source lineage and results remain in Excel and JSON.

Related working records

The related workspace contains working administrative records. Open it for the related administrative task.

Related tools

Browse all privacy and data rights tools.

• Breach chronology builderProduce a consistent timeline from verified events. Try a free example, then review your inputs and the result. No account or payment required.
• Affected-record reconciliationCompare source lists and identify duplicates or missing populations. Try a free example. Review your inputs and result. No account or payment required.
• Notification deadline calculatorApply rules after the relevant trigger is confirmed. Try a free example, then review your inputs and the result. No account or payment required.
• Breach communication drafterDraft notices from facts and conclusions. Try a free example, then review your inputs and the result. No account or payment required.
• Incident notification trackerRecord recipients, dispatch evidence and follow-up. Try a free example, then review your inputs and the result. No account or payment required.