In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, the Charity shall promptly assess the risk to people’s rights and freedoms and if appropriate report this breach to the ICO (more information on the ICO website). Charity: means PEPA, a registered charity. GDPR: means the General Data Protection Regulation. Responsible Person: means Pat Taylor. Register of Systems: means a register of all systems or contexts in which personal data is processed by the Charity.