Source before synthesis
Every value retains its regulator, reporting scheme, publication level, threshold, coverage type, source role, revision, and source link. Notification counts are not assumed to equal unique incidents.
Aggregate versus record
Aggregate statistics and anonymized notification summaries contain no named organizations. Named notifications and regulatory actions use separate contracts and views.
Time and change
Occurrence, awareness, submission, publication, and observation dates retain separate meanings. New source snapshots produce deterministic change events rather than rewriting history silently.
Cross-country comparisons
Breach Gazette compares like-for-like measures only when thresholds, periods, population scopes, and units are displayed. It does not publish a generic country ranking.