Skip to content

You are viewing the classic layout. Switch to the new layout

Tools·ICOEN
Export

ICO: report a personal data breach

The UK regulator’s breach reporting service, with a self-assessment that tells whether a breach must be reported and the online form for doing so within 72 hours. For breaches under UK GDPR.

When to use itA breach concerns processing subject to UK GDPR.

Published by
ICO (supervisory authority)
Written for
United Kingdom (UK GDPR)
For
controllers, DPOs and privacy officers
Cost
free
Languages
English
Provisions
GDPR Art. 33
Open the formico.org.uk

Description by overview.legal; the tool itself is the publisher’s.

How it connects

Form Meldloket datalekken Autoriteit Persoonsgegevens The Dutch DPA’s online form for notifying a personal data breach under Article 33, within 72 hours of becoming aware of it, with the questions the AP asks and the option to add… NL ·Autoriteit Persoonsgegevens ·in Dutch
Form AEPD personal data breach notification form (English) The Spanish DPA’s breach notification form in English, showing every field an authority asks for under Article 33(3): nature of the breach, categories and numbers of people and… ES ·AEPD
EDPB EDPB data protection guide for small business The EDPB’s guide for small businesses in every EU language: the basics of the GDPR, how to respect individuals’ rights, how to secure data and handle breaches, and a list of each… guide
AEPD Asesora Brecha: must this breach be notified? (AEPD) A short decision aid of the Spanish DPA: answer questions about a personal data breach and it says whether the breach must be notified to the supervisory authority under Article… ES ·calculator
Form Klacht of tip indienen bij de Autoriteit Persoonsgegevens The Dutch DPA’s form for a complaint, a tip or a tip about a data breach: the choice decides how it is handled. It asks for the organisation, the data concerned, whether you… NL ·Autoriteit Persoonsgegevens ·in Dutch