When creating a data breach response plan, you should appoint a response team comprised of IT, legal, and risk management personnel, and establish their roles during the crisis. You must also define what constitutes a breach to help staff recognise and establish a clear action plan.