Incident response, as performed by CERTs, CSIRTs and other related acronyms, is an essential part of keeping the Internet habitable, however it raises some interesting data protection issues. In most data protection scenarios, you know in advance what people and what information you are going to be processing, so you can give them prior notice, design systems and processes to be compliant, and so on.
