Breaches and reporting Required
Keep the notices ready
Keep notices ready for the authority, business customers and the people affected, with every field the law asks for. Know where to file each one.
How to do it
Article 33(3) lists what the authority needs. That is the nature of the breach, the kinds and rough numbers of people and records, a contact, the likely effects, and the measures taken. You may send it in phases when facts are missing, as Article 33(4) allows. Record your lead supervisory authority and the address of its online form in the obligations register. Write the letter to people in plain words, with what they should do now.
How to check
A test fills each template from a sample breach entry and fails when any required field stays empty. The register holds a lead authority and a form address that answers 200.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers compliance playbook: https://agentwranglers.se/playbook/compliance/breaches-and-reporting/breach-notice-templates.