# Notification of a personal data breach to the supervisory authority 33(5) — GDPR — provision context

> Focused context for a single provision (33(5)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-33#par-5
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Notification of a personal data breach to the supervisory authority** (GDPR, full article: https://overview.legal/laws/gdpr/art-33).

## Provision text

### 33(5)

The controller shall document any personal data breaches, comprising the facts relating to the personal data breach, its effects and the remedial action taken. That documentation shall enable the supervisory authority to verify compliance with this Article.


## Topics on this provision

- **Data Breaches** — https://overview.legal/topics/datalekken
  Security incidents involving unauthorized access to personal data
- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities
- **Notification Obligation** — https://overview.legal/topics/meldplicht
  Duty to report data breaches to authorities and affected individuals
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons

## Cited by (exact-provision citations)

- **Guidelines 9/2022 on personal data breach notification under GDPR** (guidance) — https://overview.legal/posts/38058
- **Guidelines 01/2021** (guidance) — https://overview.legal/posts/38047
- **EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space** (guidance) — https://overview.legal/posts/125922
- **Guidelines 9/2022 on personal data breach notification under GDPR** §124 (guidance, EDPB) — https://overview.legal/posts/38058
- **Guidelines 9/2022 on personal data breach notification under GDPR** §123 (guidance, EDPB) — https://overview.legal/posts/38058
- **Guidelines 9/2022 on personal data breach notification under GDPR** §121 (guidance, EDPB) — https://overview.legal/posts/38058
- **Guidelines 9/2022 on personal data breach notification under GDPR** §25 (guidance, EDPB) — https://overview.legal/posts/38058
- **Guidelines 9/2022 on personal data breach notification under GDPR** §22 (guidance, EDPB) — https://overview.legal/posts/38058
- **Guidelines 01/2021** §118 (guidance, EDPB) — https://overview.legal/posts/38047
- **Guidelines 01/2021** §9 (guidance, EDPB) — https://overview.legal/posts/38047
- **EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space** §92 (guidance, EDPB) — https://overview.legal/posts/125922
- **Guidelines 9/2022 on personal data breach notification under GDPR** §138 (guidance, EDPB) — https://overview.legal/posts/38058

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-33#par-5 · 2026-08-22