Incident management
Respond to incidents faster.
Incident intake, severity, triage, investigation, notification decisions and regulator reporting, all in one place, against the clock each law sets.
- Clock from awareness
- Notification guidance
- A full audit trail

How it works
From report to resolution.
A structured, end-to-end workflow to respond to incidents with speed and confidence.
Intake
Capture incidents from staff, systems or the public with one form.
Severity
Assess severity against your criteria and the law's thresholds.
Triage
Route to the right people with clear ownership.
Investigate
Track progress, evidence and containment steps.
Decide on notice
Guidance on whether to notify, with the reasons, for the DPO to decide.
Notification
The decision an inspector reads first.
hlola advises; the DPO decides and records why.
- 01
Clock starts
From the moment the organisation became aware.
- 02
Key factors
Personal data involved, likely risk, people affected, countries.
- 03
Decision recorded
Notify or not, with the rationale, by a named person.
- 04
Regulator notice
A task until the acknowledgement is recorded.
Audit trail and reporting
Full traceability, always.
| When | Action | By | Incident | Category |
|---|---|---|---|---|
| 14 Apr, 11:20 | Status updated | Privacy team | INC-0047 | Investigation |
| 14 Apr, 10:03 | Severity classified | System | INC-0047 | Classification |
| 14 Apr, 09:12 | Incident reported | IT service desk | INC-0047 | Intake |
In hlola: Requests › Incidents and breaches
Ready to strengthen your incident response?
See how hlola helps you manage data incidents across Africa with confidence.