The Chief Privacy Officer should continue working to identify all individual and business taxpayers impacted by the unauthorized disclosure. If warranted, take appropriate actions to place the data breach indicator on tax accounts and mail notification letters to additional taxpayers affected by the data breach.