Fernando, the internal support manager for Global Corp., is tasked with a system refresh for the HR department of 450 team members. Team members have been asked to remove all personal data prior to handing back their old system to Fernando. One senior HR executive has forgotten to wipe their old system, and even left their password on a sticky note on his screen. The executive’s laptop is unfortunately lost in transit to the third-party receiving center. What should Fernando do?
A. Nothing – maybe no one will find out!
B. Nothing – many laptops and hard drives are encrypted anyway.
C. Nothing – It’s the responsibility of the courier firm used by the third-party receiving center.
D. Immediately report the potential data breach to Global Corp’s Data Protection and Privacy team.