# Notification of a personal data breach to the supervisory authority 33(d) — GDPR — provision context

> Focused context for a single provision (33(d)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-33#par-3-pnt-d
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Notification of a personal data breach to the supervisory authority** (GDPR, full article: https://overview.legal/laws/gdpr/art-33).

## Provision text

### 33(d)

describe the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.


## Topics on this provision

- **Data Breaches** — https://overview.legal/topics/datalekken
  Security incidents involving unauthorized access to personal data
- **Notification Obligation** — https://overview.legal/topics/meldplicht
  Duty to report data breaches to authorities and affected individuals
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **CJEU - C‑313/23, C‑316/23 and C‑332/23 - Inspektorat kam Visshia sadeben savet** (case-law) — https://overview.legal/posts/158459
- **Judgment of the Court (First Chamber) of 30 April 2025.#Inspektorat kam Visshia sadeben savet.#Requests for a preliminary ruling from the Sofiyski rayonen sad.#References for a preliminary ruling – Rule of law – Judicial independence – Second subparagraph of Article 19(1) TEU – Effective legal protection in the fields covered by Union law – Judicial body competent to propose the initiation of disciplinary proceedings against judges, public prosecutors and investigating magistrates, with a view t** ¶127 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132143
- **Judgment of the Court (First Chamber) of 30 April 2025.#Inspektorat kam Visshia sadeben savet.#Requests for a preliminary ruling from the Sofiyski rayonen sad.#References for a preliminary ruling – Rule of law – Judicial independence – Second subparagraph of Article 19(1) TEU – Effective legal protection in the fields covered by Union law – Judicial body competent to propose the initiation of disciplinary proceedings against judges, public prosecutors and investigating magistrates, with a view t** ¶50 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132143
- **Judgment of the Court (First Chamber) of 30 April 2025.#Inspektorat kam Visshia sadeben savet.#Requests for a preliminary ruling from the Sofiyski rayonen sad.#References for a preliminary ruling – Rule of law – Judicial independence – Second subparagraph of Article 19(1) TEU – Effective legal protection in the fields covered by Union law – Judicial body competent to propose the initiation of disciplinary proceedings against judges, public prosecutors and investigating magistrates, with a view t** ¶1 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132143

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-33#par-3-pnt-d · 2026-08-22