AI Governance Engineer
GitHub

Personal data breach

By Updated

A breach of security leading to the accidental or unlawful destruction, loss, alteration or unauthorised disclosure of, or access to, personal data, notified to the authority within 72 hours unless unlikely to result in a risk 1. AI adds regurgitation, inversion and prompt-injection exfiltration as routes.

Developed in
ch. 19, AI-specific privacy breaches
Chapters
ch. 19, Privacy & AI
Source
1 numbered reference, listed below

Where it is used

3 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

Personal data breach: mentions per chapter6 mentions of the term across 3 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter15 Deployment: 1 mention15 Deployment117 Incidents: 4 mentions17 Incidents419 Privacy & AI: 1 mention19 Privacy & AI1No mentions in the other 20 chaptersSource: the Body of Knowledgev0.5.0
Personal data breach: mentions per chapter6 mentions of the term across 3 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter000102030405060708101112131415 Deployment: 1 mention1151617 Incidents: 4 mentions4171819 Privacy & AI: 1 mention11920212223Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of Personal data breach per chapter
ChapterMentionsCross-referenced
00 Preface0No
01 Definition0No
02 Why Now0No
03 Values & Principles0No
04 The Stack0No
05 Patterns0No
06 The Role0No
07 Maturity Model0No
08 Regulatory Map0No
10 Reading List0No
11 AI Defined0No
12 Governance Program0No
13 Risk Management0No
14 Development0No
15 Deployment1No
16 Fairness & XAI0No
17 Incidents4No
18 EU AI Act0No
19 Privacy & AI1Yes
20 Existing Law0No
21 AI Laws Worldwide0No
22 Principles & Standards0No
23 AI Agents0No

Patterns that use this term

One pattern page uses the term.

Personal data breach: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedColour: stack layer of the pattern05 AssurancePersonal data breachRelated terms (3)Membership inference · RelatedMembership inferenceModel inversion · RelatedModel inversionRegurgitation · RelatedRegurgitationPatterns using it (1)Incident Pipeline, 1 mention · Uses the termIncident Pipeline
Personal data breach: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedColour: stack layer of the pattern05 AssuranceRelated terms (3)Membership inference · RelatedMembership inferenceModel inversion · RelatedModel inversionRegurgitation · RelatedRegurgitationPatterns using it (1)Incident Pipeline, 1 mention · Uses the termIncident PipelinePersonal databreach
The term's neighbourhood Terms related to this one on solid edges, terms it is often confused with on dashed edges, and the patterns that use it most in the colour of their layer. Follow a dashed edge to check the distinction before you use either term.
Neighbourhood as a table
Neighbourhood of Personal data breach
FamilyItemRelation
Related termsMembership inferenceRelated
Related termsModel inversionRelated
Related termsRegurgitationRelated
Patterns using itIncident Pipeline, 1 mentionUses the term
  • Membership inference

    An attack that determines whether a specific person's record was in a model's training set from the model's behaviour.

  • Model inversion

    An attack that reconstructs features of training subjects, such as a face, from a model's outputs and confidence scores.

  • Regurgitation

    A model reproducing memorised training data verbatim, including personal data, whether prompted deliberately (training-data extraction) or not.

Sources

  1. [1] Regulation (EU) 2016/679 (General Data Protection Regulation) (Arts. 4(1), 4(5), 4(7), 4(8), 4(12), 4(14), 5, 6, 9, 12(3), 22, 25, 28(2) and 28(4), 30, 33, 35; Recital 26). Publications Office of the EU (EUR-Lex). 2016-04-27. https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). Personal data breach. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/personal-data-breach. CC BY 4.0

BibTeX

@misc{aige2026personaldatabreach,
  author  = {Jorge García Aibar},
  title   = {{Personal data breach}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/personal-data-breach}
}