The EDPS has issued guidelines on personal data breach notification for the EU institutions and bodies.
Under the new Regulation (EU) 2018/1725, all European institutions and bodies have a duty to report certain types of personal data breaches to the EDPS. If you have experienced a personal data breach, we advise you first to read our guidelines before submitting a data breach notification form.
http://www.europa-nu.nl/id/vku49hceqmyq/nieuws/guidelines_on_data_breach?ctx=vjgtmkwna7mq&s0e=vhdubxdwqrzw
