Deciding whether and when to self-report a breach is among the most consequential judgements a leadership team faces, balancing the benefits of candour against the risks of disclosure. It matters to a board because many regimes reward prompt self-reporting and penalise concealment, yet the calculation is rarely simple and the timing is delicate. This report sets out how self-reporting works in your chosen jurisdiction and industry, the frameworks that govern mandatory and voluntary disclosure, the warning indicators that the decision can no longer be deferred, the financial and legal impact ranges across different choices, and a structured decision approach, with explicit guidance on when to engage counsel before any disclosure.
Reference material for informed readers, not advice.
