The guidelines detail the mandatory breach notification and communication requirements outlined in the GDPR, providing guidance for controllers and processors on how to fulfil these obligations. Additionally, the document includes examples of different types of data breaches and specifies the parties that need to be notified in various scenarios.
Author: European Data Protection Board
Status: Adopted / Published
Adoption date: 2023-03-28
Last updated: 08 Aug 2025
Category: Guidance
Subcategory: Official guidance