GDPR breach check
GDPR breach-notification scenarios
A controller must notify the supervisory authority of a personal-data breach **without undue delay and within 72 hours** of becoming aware, *unless* the breach is **unlikely to risk** individuals' rights. The notification must state the **nature, categories and rough number affected, likely consequences, and measures taken**; a late filing must carry **reasons for the delay**.
Published release2025.01.0112 distinct paths
Calculated result
2Complete “Authority-notification date, time, and zone”
Action required
Complete “Authority-notification date, time, and zone” — Authority-notification date, time, and zone becomes… · Authority Notified: Yes
Supervisory authority notified: Yes
Action required
Complete “Authority-notification date, time, and zone” — Reasons for notification after 72 hours becomes… · A notification made after 72 hours must be…
Supervisory authority notified: YesNotified within 72 hours: No
Calculated result
6Phased reporting is available only when the information cannot be provided at…
Action required
Phased reporting is available only when the information cannot be provided at… — Risk To Individuals: Likely · Authority-notification date, time, and zone becomes…
A personal-data breach under GDPR has been confirmed: YesRisk to individuals' rights and freedoms: LikelyAvailable notification information is being supplied in phases: Yes
Action required
Phased reporting is available only when the information cannot be provided at… — The current risk assessment indicates that… · This breach is reportable: notify the…
A personal-data breach under GDPR has been confirmed: YesRisk to individuals' rights and freedoms: LikelyAvailable notification information is being supplied in phases: Yes
Action required
Phased reporting is available only when the information cannot be provided at… — Supply the currently available notification… · Available Information Supplied Without…
A personal-data breach under GDPR has been confirmed: YesRisk to individuals' rights and freedoms: HighAvailable notification information is being supplied in phases: Yes
Action required
Phased reporting is available only when the information cannot be provided at… — Reasons for notification after 72 hours becomes… · A notification made after 72 hours…
A personal-data breach under GDPR has been confirmed: YesRisk to individuals' rights and freedoms: LikelyAvailable notification information is being supplied in phases: Yes
Action required
Phased reporting is available only when the information cannot be provided at… — The current risk assessment indicates that… · This breach is reportable: notify the…
A personal-data breach under GDPR has been confirmed: YesRisk to individuals' rights and freedoms: HighAvailable notification information is being supplied in phases: Yes
Action required
Phased reporting is available only when the information cannot be provided at… — Reasons for notification after 72 hours becomes… · A notification made after 72 hours…
A personal-data breach under GDPR has been confirmed: YesRisk to individuals' rights and freedoms: HighAvailable notification information is being supplied in phases: Yes
Calculated result
3Complete “Approx. number of affected data subjects”
Action required
Complete “Approx. number of affected data subjects” — Authority-notification date, time, and zone becomes… · Authority Notified: Yes
A personal-data breach under GDPR has been confirmed: YesRisk to individuals' rights and freedoms: LikelyAvailable notification information is being supplied in phases: No
Action required
Complete “Approx. number of affected data subjects” — The current risk assessment indicates that… · This breach is reportable: notify the supervisory…
A personal-data breach under GDPR has been confirmed: YesRisk to individuals' rights and freedoms: LikelyAvailable notification information is being supplied in phases: No
Action required
Complete “Approx. number of affected data subjects” — Reasons for notification after 72 hours becomes… · A notification made after 72 hours must be…
A personal-data breach under GDPR has been confirmed: YesRisk to individuals' rights and freedoms: HighAvailable notification information is being supplied in phases: No
Calculated result
1