Incident / trigger,Immediate action,Legal reporting check,Evidence,Owner,Deadline,Root cause,Preventive action,Closed by
Ad platform account compromised,"Revoke tokens, lock payment methods, preserve logs, notify client and provider, quantify unauthorised spend and remediate MFA roles.",Check current jurisdiction trigger,,,,,,
Copyright takedown,"Suspend creative, preserve source licences and use legitimate dispute/removal route; do not upload modified infringing content.",Check current jurisdiction trigger,,,,,,
Performance overstatement found,"Correct reports and marketing claim, verify attribution/denominators and compensate/reissue according to contract where necessary.",Check current jurisdiction trigger,,,,,,
Client disputes ad-spend ledger,"Reconcile approved budget, third-party account invoices, agency markup and tax with time-stamped authorisation.",Check current jurisdiction trigger,,,,,,
Data exported to unknown tool,"Identify exporter, tool and records, revoke access, review privacy and contractual disclosures, execute vendor due diligence.",Check current jurisdiction trigger,,,,,,