Taking remedial action to prevent an eligible data breach

If an entity is able to take appropriate remedial action in relation to an incident, it may mean that no individuals are likely to suffer serious harm, which in turn means that the incident will not be an eligible data breach and will not need to be notified.