Blue Papers are a new notion in concept papers. This one provides the legal position of the General Data Protection Regulation (GDPR) on data security and data breaches. In particular, it presents a legally defensible compliance position for organisations in the form of a practical Accountability Framework for handling actual data breaches. It is best guidance for professionals, politicians, scholars, and all who wish to glean more insight into how to develop a robust data protection framework. What readers will find in this Blue Paper will empower them to assess their real situation and will aid them in conceptualising practical solutions.