The EDPS has issued guidelines on personal data breach notification for the EU institutions and bodies.

Under the new Regulation (EU) 2018/1725, all European institutions and bodies have a duty to report certain types of personal data breaches to the EDPS. If you have experienced a personal data breach, we advise you first to read our guidelines before submitting a data breach notification form.