Tools·AEPDEN
Export
Asesora Brecha: must this breach be notified? (AEPD)
A short decision aid of the Spanish DPA: answer questions about a personal data breach and it says whether the breach must be notified to the supervisory authority under Article 33. Its companion Comunica-Brecha covers informing the people affected.
When to use itA breach has just happened and you must decide within 72 hours whether to notify.
- Published by
- AEPD (supervisory authority)
- Written for
- Spain
- For
- controllers, DPOs and privacy officers
- Cost
- free
- Languages
- Spanish, English
- Provisions
- GDPR Art. 33
Open the toolaepd.es
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
EDPB EDPB data protection guide for small business The EDPB’s guide for small businesses in every EU language: the basics of the GDPR, how to respect individuals’ rights, how to secure data and handle breaches, and a list of each… guide
Form Meldloket datalekken Autoriteit Persoonsgegevens The Dutch DPA’s online form for notifying a personal data breach under Article 33, within 72 hours of becoming aware of it, with the questions the AP asks and the option to add… NL ·Autoriteit Persoonsgegevens ·in Dutch
Form ICO: report a personal data breach The UK regulator’s breach reporting service, with a self-assessment that tells whether a breach must be reported and the online form for doing so within 72 hours. For breaches… UK ·ICO
Form AEPD personal data breach notification form (English) The Spanish DPA’s breach notification form in English, showing every field an authority asks for under Article 33(3): nature of the breach, categories and numbers of people and… ES ·AEPD
CNIL CNIL PIA software (privacy impact assessment tool) Free, open-source software by the French DPA that guides a controller through a data protection impact assessment: describe the processing, assess necessity and proportionality,… calculator ·open source
ICO ICO lawful basis interactive guidance tool Interactive questionnaire by the UK regulator that helps a controller choose the most appropriate lawful basis under Article 6 (and a condition under Articles 9 and 10) for one… UK ·calculator