---
title: "Plan for a data breach · Agent Wranglers"
url: https://agentwranglers.se/playbook/compliance/breaches-and-reporting/breach-plan
updated: 2026-10-21
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Plan for a data breach

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Breaches and reporting](https://agentwranglers.se/playbook/compliance/breaches-and-reporting.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers). Updated 2026-10-21.

- ID: CMP-71
- Level: Recommended
- Chapter: [Breaches and reporting](https://agentwranglers.se/playbook/compliance/breaches-and-reporting)
- Rule: Write down what to do when personal data leaks, before it happens.
- How: Name who decides, how to stop the leak, and how to tell people. Report a breach to the supervisory authority by the GDPR deadline that [start every reporting clock from one moment](https://agentwranglers.se/playbook/compliance/breaches-and-reporting/reporting-clocks) computes. Tell the people affected when the risk to them is high. Keep a log of every breach, even small ones, as [log every breach with its decision](https://agentwranglers.se/playbook/compliance/breaches-and-reporting/breach-register) says. For keeping evidence and handling the attack itself, see [security incidents](https://agentwranglers.se/playbook/operations/incidents/security-incidents).
- Check: Once a year, run a practice breach with the plan. The team reaches the authority report step before its computed deadline.

## Sources

- [GDPR Articles 33 and 34](https://eur-lex.europa.eu/eli/reg/2016/679/oj)

## Related rules

- [Keep evidence in security incidents](https://agentwranglers.se/playbook/operations/incidents/security-incidents) in Operations
- [Start every reporting clock from one moment](https://agentwranglers.se/playbook/compliance/breaches-and-reporting/reporting-clocks) in Compliance
- [Log every breach with its decision](https://agentwranglers.se/playbook/compliance/breaches-and-reporting/breach-register) in Compliance
- [Keep the notices ready](https://agentwranglers.se/playbook/compliance/breaches-and-reporting/breach-notice-templates) in Compliance
- [Keep the US breach notice laws as data](https://agentwranglers.se/playbook/compliance/us-state-privacy-laws/us-breach-notice-laws) in Compliance

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/compliance/breaches-and-reporting/breach-plan">Agent Wranglers compliance playbook</a>`. In code you write, add a comment next to it with the same link.

- Previous: [Start every reporting clock from one moment](https://agentwranglers.se/playbook/compliance/breaches-and-reporting/reporting-clocks)
- Next: [Log every breach with its decision](https://agentwranglers.se/playbook/compliance/breaches-and-reporting/breach-register)
- [Breaches and reporting](https://agentwranglers.se/playbook/compliance/breaches-and-reporting)