A best practice is to prevent a privacy incident from occurring in the first place. Do this by first identifying current privacy exposures and second by prioritizing how to address them. However, when a privacy incident occurs, resolve the issues as quickly as possible by following your established incident response procedures and then analyzing the incident.
