How to notify a data breach to your DPA?

Österreichische Datenschutzbehörde
(Austrian Data Protection Authority)

Notify a data breach

The data breach notification is accepted in German.

Autorité de protection des données / Gegevensbeschermingsautoriteit / Datenschutzbehorde
(Belgian Data Protection Authority)

Notify a data breach:

• in French
• in Dutch
• in German

The data breach notification is accepted in French, Dutch or German.

Commission for Personal Data Protection of the Republic of Bulgaria
(Bulgarian Data Protection Authority)

Notify a data breach

The information on data breach notification are also available in English and French.
The data breach notification is accepted in Bulgarian.

Agencija za zaštitu osobnih podataka (AZOP)
(Croatian Personal Data Protection Agency)

Notify a data breach

The data breach notification is accepted in Croatian or English.

Office of the Commissioner for Personal Data Protection
(Cypriot Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Greek, or in English in cases where the breach concerns cross-border processing.

Office for Personal Data Protection
(Czech Data Protection Authority)

Notify a data breach:

1. Data breach information
2. Data breach form (Czech)
3. Send the notification form by email to posta@uoou.gov.cz

The data breach notification is accepted in Czech and English.

Datatilsynet
(Danish Data Protection Authority)

Notify a data breach

Danish companies and natural persons can submit the notification online, while everyone can send it by email to dt@datatilsynet.dk.

The data breach notification is accepted in Swedish, Norwegian or English.

Estonian Data Protection Inspectorate
(Estonian Data Protection Authority)

Notify a data breach

Personal data breach notifications can be reported:

1. Filling out the form in Estonian or English, and send it by email to info@aki.ee
2. Submit the notification via specific e-service. Service can be used by persons having national eID carriers like ID-card, Mobile-ID or Smart-ID.

The data breach notification is accepted in Estonian or English.

Office of the Data Protection Ombudsman
(Finnish Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Finnish, Swedish or English.

Commission Nationale de l'Informatique et des Libertés - CNIL
(French Data Protection Authority)

Notify a data breach
violations@cnil.fr

The data breach notification is accepted in French.

Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Federal Commissioner for Data Protection and Freedom of Information

Notify a data breach

The data breach notification is accepted in German.

Landesbeauftragte für den Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern
Data Protection Authority of Mecklenburg-Western Pomerania

Notify a data breach

The data breach notification is accepted in German or English.

Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
The Rhineland-Palatinate State Commissioner for Data Protection and freedom of information

Notify a data breach

The data breach notification is accepted in German or English.

Der Landesbeauftragte für den Datenschutz Niedersachsen
Lower Saxony Data Protection Authority

Notify a data breach

The data breach notification is accepted in German or English.

Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Office of the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information)

Notify a data breach

The data breach notification is accepted in German or English.

Bayerisches Landesamt für Datenschutzaufsicht
Bavarian Data Protection Authority for the Private Sector

Notify a data breach

The data breach notification is accepted in German or English.

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Berlin Data Protection Authority

Notify a data breach

The data breach notification is accepted in German.

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg
The Commissioner for Data Protection and Freedom of Information Baden-Wuerttemberg)

Notify a data breach

The data breach notification is accepted in German or English.

Hessischer Beauftragter für Datenschutz und Informationsfreiheit
The Hessian Commissioner for Data Protection and Freedom of Information

Notify a data breach

The data breach notification is accepted in German.

Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Brandenburg Commissioner for Data Protection and Access to Information

Notify a data breach

The data breach notification is accepted in German or English.

Unabhängiges Datenschutzzentrum Saarland
Saarland Data Protection Authority

Notify a data breach

The data breach notification is accepted in German.

Landesbeauftragte für Datenschutz Schleswig-Holstein
Schleswig-Holstein Data Protection Authority

Notify a data breach

Email: mail@datenschutzzentrum.de

The data breach notification is accepted in German or English.

Landesbeauftragter für den Datenschutz Sachsen-Anhalt
The Data Protection Commissioner of Saxony-Anhalt

Notify a data breach

The data breach notification is accepted in German or English.

Sächsische Datenschutzbeauftragte
Saxon Data Protection and Transparency Commissioner

Notify a data breach

The data breach notification is accepted in German or English.

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit
The Commissioner for Data Protection and Freedom of Information Thüringen

Notify a data breach:

1. Fill in the form and send it by email to poststelle@datenschutz.thueringen.de
2. Fill in the form and send it by post to Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit, Postfach 900455 - 99107 Erfurt

The data breach notification is accepted or German.

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
The Hamburg Commissioner for Data Protection and Freedom of Information

Notify a data breach

The data breach notification is accepted in German or English.

Landesbeauftragte für Datenschutz und Informationsfreiheit Bremen
The State Commissioner for Data Protection and Freedom of Information Bremen

Notify a data breach

The data breach notification can be submitted in German and English
 

Hellenic Data Protection Authority
(Greek Data Protection Authority)

Notify a data breach:

• in Greek
• in English

The data breach notification is accepted in Greek or English.

Nemzeti Adatvédelmi és Információszabadság Hatóság / Hungarian National Authority for Data Protection and Freedom of Information
(Hungarian Data Protection Authority)

Notify a data breach:

• by post: download the notification form, Word or Excel files, and send it to the Hungarian DPA at 1363 Budapest, Pf.: 9.; Hungary
• by email: download the notification form, Word or Excel files, and send it to ugyfelszolgalat@naih.hu
• online: on the Hungarian DPA notification surface
• on the Hungarian DPA's electronic administration interface (e-papir)

The personal data breach notification portal is only for personal data breach notifications for data controllers, it is not possible to submit complaints.

The data breach notification is accepted in Hungarian, preliminary notifications are also accepted in English, but it is mandatory to submit them later in Hungarian.

Notify a data breach in Icelandic - in English

• Data controllers can submit a data breach notification by filling the online form.
• Individuals that want to report on a potential data breach can do so via email at postur@personuvernd.is

The data breach notification is accepted in Icelandic, or in English in cases where the breach concerns cross-border processing.

Data Protection Commission - DPC
(Irish Data Protection Authority)

• Notify a data breach
• Contact us

The data breach notification is accepted in Irish or English.

Garante per la protezione dei dati personali
(Italian Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Italian.

Data State Inspectorate
(Latvian Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Latvian.

Data Protection Authority Principality of Liechtenstein

Notify a data breach:

• in German
• in English

The data breach notification is accepted in German or English.

State Data Protection Inspectorate
(Lithuanian Data Protection Authority)

Notify a data breach

Further information:

• Notification of a Personal Data Breach to the State Data Protection Inspectorate (English)
• Notification form (English)
• Privacy notice
• Link to e-service

The data breach notification is accepted in Lithuanian. Documents in English are only for information

Commission Nationale pour la Protection des Données
(Luxembourgish Data Protection Authority)

Notify a data breach:

1. Fill in the form
2. Send it by email to databreach@cnpd.lu or by post to Commission nationale pour la protection des données, 15, Boulevard du Jazz I L-4370 Belvaux

The data breach notification is accepted in French, German or English.

Office of the Information and Data Protection Commissioner
(Maltese Data Protection Authority)

Notify a data breach

The data breach notification is accepted in English or Maltese.

Autoriteit Persoonsgegevens
(Dutch Data Protection Authority)

Notify a data breach in Dutch - in English

The data breach notification is accepted in Dutch or English. This form is meant to assist in translating and submitting the Dutch form and cannot be submitted via e-mail or any other channels.

Datatilsynet
(Norwegian Data Protection Authority)

Notify a data breach:

1. online data breach notification form (best option) or,
2. by email to postkasse@datatilsynet.no or regular mail. There is no specific form that should be used to notify a personal data breach via email or regular mail, please follow the guidance (in Norwegian) on the information that is expected to be received with a personal data breach notification. Datatilsynet can receive messages encrypted according to the OpenPGP standard: Datatilsynet OpenPGP key.

The data breach notification may be submitted in Norwegian, Danish, Swedish and English.

Urząd Ochrony Danych Osobowych
(Polish Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Polish. Form in English (for information purposes only).

Comissão Nacional de Proteção de Dados (CNPD)
(Portuguese Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Portuguese.

Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal
(Romanian Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Romanian or English.

Office for Personal Data Protection of the Slovak Republic
(Slovak Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Slovak.

Information Commissioner of the Republic of Slovenia
(Slovenian Data Protection Authority)

Notify a data breach:

1. Fill in the form (docx)
2. In case of cross-border data breach, please also fill in the provided annex to the form (docx)
3. Send the form(s) by email: prijava-krsitev@ip-rs.si

The data breach notification is accepted in Slovenian.

Agencia Española de Protección de Datos
(Spanish Data Protection Authority)

Notify a data breach:

• controllers in the European Union can submit the online notification form
• controllers not established in the European Union and without any establishment in Spain can:
  1. fill in the pdf form completely and digitally signed: Spanish form and English form,
  2. submit the form to brechas@aepd.es adding “DBN” and controller name in the subject of the email.

Note: submissions by email from controllers with an establishment in Spain will be not accepted as personal data breach notification, use online notification form instead. Submissions by email from non-corporate email domains will not be accepted as valid personal data breach notification. Use corporate email domains of controller, processor or representative to submit the form.

The data breach notification can be submitted only in Spanish and English, submissions in any other language will not be accepted as valid personal data breach notification.
 

Integritetsskyddmyndigheten
(Swedish Data Protection Authority)

Notify a data breach:

• in Swedish
• in English

The data breach notification is accepted in Swedish or English.