Examples make the register concrete

Privacyboard’s Incidents page is "Your breach register: every personal data breach, and what you did about it." With no entries, the empty card says "No incident recorded" and lists everyday examples: "a lost laptop, an email sent to the wrong person, a hacked account".

The rule that is easy to miss

The empty state also states that "Even those you do not have to notify must be kept in this register", a point many small companies don’t know.

The same action twice

A violet "Record an incident" button appears both in the header, next to an Export button marked Business, and inside the empty card.