Published · European Union
GDPRGuidance document
European Data Protection Supervisor releases FAQ on personal data breach notifications
EDPS published a FAQ detailing risk assessment, mandatory notification form, phased notifications and mitigation steps for controllers and processors.
1 source · 1 official · European Data Protection Supervisor
What happened
- The EDPS issued a new FAQ on personal data breach notification.
- It clarifies how to assess breach risk and when to use the mandatory notification form.
- The guidance also outlines phased notification approaches and recommended mitigation measures.
Why it matters
Controllers and processors across the EU will need to follow the clarified steps to avoid non‑compliance with the GDPR breach‑notification obligations.
Business impact
Adopting the FAQ guidance can streamline breach reporting timelines and reduce regulatory scrutiny.
Drafted automatically from the sources below. How we write summaries
Does this summary seem wrong?What to check
use mandatory notification formHigh priority
Submit the standardized breach notification form to the EDPS for any qualifying incident.
conduct risk assessmentMedium priority
Evaluate the likelihood and severity of harm to data subjects before deciding on notification scope.
plan phased notificationsMedium priority
Notify affected individuals in stages as recommended to manage communication load.
Discussion
No comments yet. Start the discussion.