| Field | Notes |
|---|---|
| Date discovered | |
| What happened | |
| Data involved | client and site addresses, vehicle or property records, access instructions, diagnostic notes, job photos, parts and warranty records, invoices, payment details, and messages. |
| People affected | |
| Immediate action taken | |
| Risk decision | Is there a risk to people? Was ICO reporting considered? |
| Outcome | |
| Prevention | What document, process, supplier, access, or training change is needed? |