Report a Data Breach

Use this form to report personal data breach. Your report is recorded in the organisation's breach register for the Data Protection Officer.

Provide as much detail as you can. The Data Protection Officer will assess risk, containment, and notification duties under GDPR Articles 33 and 34 and EDPB guidance. Do not include unnecessary full personal data of affected individuals in free-text fields.

Reported / aware

The 72-hour clock starts when the controller becomes AWARE, not when the breach occurred. Start the internal log (Art. 33(5)).

Incident Title *

Date/Time Discovered *

Date/Time Organisation Became Aware *

The 72-hour clock to a supervisory authority starts from awareness, not from when the incident occurred.

Reported By *

Email *

Breach Type (CIA)

Nature of Incident

Description of the Security Compromise *

Categories of Personal Data Affected

Approximate Number of Data Subjects

Approximate Number of Records

Containment Measures Taken

Optional: describe any immediate steps already taken (e.g. account locked, email recalled, device isolated).

Cancel

This Data Protection Officer Portal comprises several components designed to assist data protection officers perform their duties and engage with data subjects.