Refers to a situation where a Processor or Controller loses personal data by way of loss, ransom, unauthorised access, destruction etc.