Guidelines 9/2022 on personal data breach notification under GDPR

See the Final version of this publication adopted after public consultation.
Guidelines 9/2022 7MB
Publication Type:

The European Data Protection Board welcomes comments on the targeted update made Guidelines 09/2022 on personal data breach notification under GDPR. The targeted update and this public consultation concern paragraph 73 of the Guidelines (marked in yellow in the document). Such comments should be sent 29th November 2022 at the latest using the provided form.

Please note that, by submitting your comments, you acknowledge that your comments might be published on the EDPB website.

The EDPB Secretariat staff screens all replies provided before publication (only for the purpose of blocking unauthorised submissions, such as spam), after which the replies are made available to the public directly on the EDPB public consultations’ page. Unauthorised submissions are immediately deleted. The attached files are not altered in any way by the EDPB.

Please, note that regardless the option chosen, your contribution may be subject to a request for access to documents under Regulation 1049/2001 on public access to European Parliament, Council and Commission documents. In this case the request will be assessed against the conditions set out in the Regulation and in accordance with applicable data protection rules.

All legal details can be found in our Specific Privacy Statement (SPS).


Date Feedback reference Type Country Submitted by
29 November 2022 09/2022-0001 DPO/Professional Association Czech Republic Spolek pro ochranu osobních údajů View feedback
19 October 2022 09/2022-0002 Company/business organisation Germany Christine Jülich / General Counsel View feedback
29 October 2022 09/2022-0003 DPO/Professional Association France RASLE Bruno View feedback
03 November 2022 09/2022-0004 Individual United States Grant Barrett View feedback
03 November 2022 09/2022-0005 Company/business organisation New Zealand Jefferson Tukimata View feedback
05 November 2022 09/2022-0006 Academic/research institution Netherlands Jeroen Knijff View feedback
07 November 2022 09/2022-0007 Academic/research institution Netherlands Jeroen Knijff View feedback
11 November 2022 09/2022-0008 Company/business organisation Ireland Data Protection Representative Limited (trading as DataRep) View feedback
25 November 2022 09/2022-0009 Company/business organisation Estonia Veriff OÜ View feedback
28 November 2022 09/2022-0010 Business association Belgium Federation of European Data and Marketing (FEDMA) View feedback