Designed to ensure better protection of personal data held by private and public sector organisations, the regulations lay down clear guidelines for what must happen in the case of a data breach. (educationmattersmag.com.au)
For example, in an educational setting that means all, and any, personal data held on students, parents, staff and governors. (qaeducation.co.uk)
I wonder, though, if it wouldn't be preferable to have the critical data held in a distributed fashion, rather than in a single location. (slaw.ca)