The EDPB has issued a draft data breach notification form. The form is designed to “structure, harmonise and unify data breach notification procedures.” The template covers the required information needed when notifying a breach and is structured as follows:
- Type of notification – initial or follow up
- Identification of the controller and reporting person
- Initial information on the breach – such as time, nature, who, what etc.
- Further information – including likely consequences, risk assessment and mitigation
- Communication to the data subjects
- Possible other issues – e.g. involvement of other authorities
- Attachments
The form is open for public consultation until 5 August 2026.
