How to notify your DPA of a data breach

Under Article 33, paragraph 1, of the EU General Data Protection Regulation, a data controller that has been subject to a personal data breach must report the breach to the proper EU supervisory authority, as defined by Articles 55 and 56. The chart below aims to help you quickly comply with this requirement, compiling information from EU SAs on the way they prefer to be notified of a breach.

Country Preferred method for breach notification Form language(s) Additional information

Austria Download form and email to dsb@dsb.gv.at German Post and fax are also acceptable methods.

Belgium Download form and submit online (must use Adobe Acrobat to view pdf) French or Dutch ⋅  Specific process for telecoms. 
⋅  Guidance on submitting form (in French)

Bulgaria Information to come. Information to come.  

Croatia Download form and email to incident@azop.hr Croatian  

Cyprus Download form and email to commissioner@dataprotection.gov.cy Greek or English (cross-border processing only) Points to WP29 guidance.

Czech Republic Submit online form Czech Notification must be made within 24 hours.

Denmark Submit online form Danish Requires an account.

Estonia Download form and email to info@aki.ee Estonian  

Finland Submit online form Finnish  

 France Submit online form French Notification must be made online within 24 hours and supplementary form within 72 hours.

Germany Submit online form
DPA of federal government has implemented an online notification system for public agencies of federal government, providers of postal and telecommunications services only.
German ⋅  Only for organizations subject to the federal regulatory agency, BfDI.
⋅ Post, De-mail, fax or email are also acceptable.
⋅  Guidance
 
Baden-Württemberg Submit online form German  
 
Bavaria  Submit online form German  
 
Berlin Download form at right of page 
and mail, fax or email to behDSB@datenschutz-berlin.de
German  
 
Bremen Contact the DPA through any acceptable method on its website. German  
 
Hamburg Contact the DPA through any acceptable method on its website. German Online form is in development, check website.
 
Hesse Download form and request and upload link to submit. German  
 
Lower Saxony Submit online form German  
 
Mecklenburg-Vorpommern Submit online form German  
 
Nordrhein-Westfalen Download form and email to poststelle@ldi.nrw.de or mail according to instructions provided. German  
 
Rheinland-Pfalz Submit online form German  
 
Saarland Contact the DPA through any acceptable method on its website. German  
 
Sachsen Contact the DPA through any acceptable method on its website. German Form is in development, check website.
 
Sachsen-Anhalt Contact the DPA through any acceptable method on its website. German  
 
Schleswig-Holstein Contact the DPA through any acceptable method on its website. German  
 
Thuringia Contact the DPA through any acceptable method on its website. German  

Greece Download form and email to databreach@dpa.gr Greek or English (cross-border processing only) ⋅  Must use system to encrypt file prior to sending.
⋅  Electronic communications providers have a separate form.

Hungary Online system or download form and email tougyfelszolgalat@naih.hu Hungarian Must create account to submit online form.

Ireland Submit form online, or download form and email to  breaches@dataprotection.ie English Specific forms for telecoms, cross-border breaches and national breaches.

Italy Download form and email to databreach.pa@pec.gpdp.it Italian  

Latvia Download form and email to info@dvi.gov.lv Latvian  

Lithuania Submit online form  Lithuanian More information about reporting.

Luxembourg Download form and email to databreach@cnpd.lu English or French Provides public encryption key.

Malta Download form and email to idpc.info@idpc.org.mt English or Maltese Points to WP29 guidance.

The Netherlands Submit online form Dutch  

Poland Submit online form Polish ⋅  More information about reporting.
⋅  Submission via ePUAP is also acceptable.

Portugal Submit online form Portuguese  

Romania Download form and email to brese@dataprotection.ro Romanian More information on reporting.

Slovakia Submit online form Slovak  

Slovenia Download form and email to krsitev@ip-rs.si Slovene  

Spain Submit online form Spanish  

Sweden Download form and mail to address provided Swedish or English Specific forms for cross-border breaches and national breaches.

UK Call hotline, submit online form or email form to casework@ico.org.uk English Specific forms for telecoms and digital service providers.