An unauthorised or accidental disclosure of, or access to, personal data.