How to notify a data breach to your DPA?

Österreichische Datenschutzbehörde
(Austrian Data Protection Authority)

Notify a data breach

The data breach notification is accepted in German.

Autorité de protection des données / Gegevensbeschermingsautoriteit / Datenschutzbehorde
(Belgian Data Protection Authority)

Notify a data breach:

• in French
• in Dutch
• in German

The data breach notification is accepted in French, Dutch or German.

Commission for Personal Data Protection of the Republic of Bulgaria
(Bulgarian Data Protection Authority)

Notify a data breach

The information on data breach notification are also available in English and French.
The data breach notification is accepted in Bulgarian.

Agencija za zaštitu osobnih podataka (AZOP)
(Croatian Personal Data Protection Agency)

Notify a data breach

The data breach notification is accepted in Croatian or English.

Office of the Commissioner for Personal Data Protection
(Cypriot Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Greek, or in English in cases where the breach concerns cross-border processing.

Office for Personal Data Protection
(Czech Data Protection Authority)

Notify a data breach:

1. Data breach information
2. Data breach form (Czech)
3. Send the notification form by email to posta@uoou.gov.cz

The data breach notification is accepted in Czech and English.

Datatilsynet
(Danish Data Protection Authority)

Notify a data breach

Danish companies and natural persons can submit the notification online, while everyone can send it by email to dt@datatilsynet.dk.

The data breach notification is accepted in Swedish, Norwegian or English.

Estonian Data Protection Inspectorate
(Estonian Data Protection Authority)

Notify a data breach

Personal data breach notifications can be reported:

1. Filling out the form in Estonian or English, and send it by email to info@aki.ee
2. Submit the notification via specific e-service. Service can be used by persons having national eID carriers like ID-card, Mobile-ID or Smart-ID.

The data breach notification is accepted in Estonian or English.

Office of the Data Protection Ombudsman
(Finnish Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Finnish, Swedish or English.

Commission Nationale de l'Informatique et des Libertés - CNIL
(French Data Protection Authority)

Notify a data breach

The data breach notification is accepted in French.

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Federal Commissioner for Data Protection and Freedom of Information

Notify a data breach

The data breach notification is accepted in German.

Data Protection Authority of Mecklenburg-Western Pomerania

Notify a data breach

The data breach notification is accepted in German or English.

The Rhineland-Palatinate State Commissioner for Data Protection and freedom of information

Notify a data breach

The data breach notification is accepted in German or English.

Der Landesbeauftragte für den Datenschutz Niedersachsen

Notify a data breach

The data breach notification is accepted in German or English.

Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Office of the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information)

Notify a data breach

The data breach notification is accepted in German or English.

Bayerisches Landesamt für Datenschutzaufsicht
Bavarian Data Protection Authority for the Private Sector

Notify a data breach

The data breach notification is accepted in German or English.

Berliner Beauftragte für Datenschutz und Informationsfreiheit

Notify a data breach

The data breach notification is accepted in German.

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg
The Commissioner for Data Protection and Freedom of Information Baden-Wuerttemberg)

Notify a data breach

The data breach notification is accepted in German or English.

The Hessian Commissioner for Data Protection and Freedom of Information

Notify a data breach

The data breach notification is accepted in German.

Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Brandenburg Commissioner for Data Protection and Access to Information

Notify a data breach

The data breach notification is accepted in German or English.

Unabhängiges Datenschutzzentrum Saarland

Notify a data breach

The data breach notification is accepted in German.

Landesbeauftragte für Datenschutz Schleswig-Holsetin

Notify a data breach

Email: mail@datenschutzzentrum.de

The data breach notification is accepted in German or English.

Landesbeauftragter für den Datenschutz Sachsen-Anhalt
The Data Protection Commissioner of Saxony-Anhalt

Notify a data breach

The data breach notification is accepted in German or English.

Saxon Data Protection and Transparency Commissioner

Notify a data breach

The data breach notification is accepted in German or English.

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit
The Commissioner for Data Protection and Freedom of Information Thüringen

Notify a data breach:

1. Fill in the form and send it by email to poststelle@datenschutz.thueringen.de
2. Fill in the form and send it by post to Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit, Postfach 900455 - 99107 Erfurt

The data breach notification is accepted or German.

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
The Hamburg Commissioner for Data Protection and Freedom of Information

Notify a data breach

The data breach notification is accepted in German or English.

Hellenic Data Protection Authority
(Greek Data Protection Authority)

Notify a data breach:

• in Greek
• in English

The data breach notification is accepted in Greek or English.

Nemzeti Adatvédelmi és Információszabadság Hatóság / Hungarian National Authority for Data Protection and Freedom of Information
(Hungarian Data Protection Authority)

Notify a data breach:

• by post: download the notification form and send it to the Hungarian DPA at 1363 Budapest, Pf.: 9.; Hungary
• by email: download the notification form and send it to ugyfelszolgalat@naih.hu
• online: on the Hungarian DPA notification surface
• on the Hungarian DPA's electronic administration interface (e-papir)

The personal data breach notification portal is only for personal data breach notifications for data controllers, it is not possible to submit complaints.

The data breach notification is accepted in Hungarian, preliminary notifications are also accepted in English, but it is mandatory to submit them later in Hungarian.

Notify a data breach

• Data controllers can submit a data breach notification by filling the online form. 
• Individuals that want to report on a potential data breach can do so via email at postur@personuvernd.is

The data breach notification is accepted in Icelandic, or in English in cases where the breach concerns cross-border processing.

Data Protection Commission - DPC
(Irish Data Protection Authority)

• Notify a data breach
• Contact us

The data breach notification is accepted in Irish or English.

Garante per la protezione dei dati personali
(Italian Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Italian.

Data State Inspectorate
(Latvian Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Latvian.

Data Protection Authority Principality of Liechtenstein

Notify a data breach:

• in German
• in English

The data breach notification is accepted in German or English.

State Data Protection Inspectorate
(Lithuanian Data Protection Authority)

Notify a data breach

Further information:

• Notification of a Personal Data Breach to the State Data Protection Inspectorate (English)
• Notification form (English)
• Privacy notice
• Link to e-service

The data breach notification is accepted in Lithuanian. Documents in English are only for information

Commission Nationale pour la Protection des Données
(Luxembourgish Data Protection Authority)

Notify a data breach:

1. Fill in the form
2. Send it by email to databreach@cnpd.lu or by post to Commission nationale pour la protection des données, 15, Boulevard du Jazz I L-4370 Belvaux

The data breach notification is accepted in French, German or English.

Office of the Information and Data Protection Commissioner
(Maltese Data Protection Authority)

Notify a data breach

The data breach notification is accepted in English or Maltese.

Autoriteit Persoonsgegevens
(Dutch Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Dutch or English.

Datatilsynet
(Norwegian Data Protection Authority)

Notify a data breach:

• Online guidance
• By email to postkasse@datatilsynet.no.

There is no specific form to use to notify a personal data breach by email, the online guidance provides the information that is expected to be received with a personal data breach notification.
The data breach notification is accepted in Norwegian, Danish, Swedish or English.

Urząd Ochrony Danych Osobowych
(Polish Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Polish, the English translation of the form available on the website is for information purposes only.

Comissão Nacional de Proteção de Dados (CNPD)
(Portuguese Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Portuguese.

Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal
(Romanian Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Romanian or English.

Office for Personal Data Protection of the Slovak Republic
(Slovak Data Protection Authority)

Notify a data breach

The data breach notification is accepted in Slovak.

Information Commissioner of the Republic of Slovenia
(Slovenian Data Protection Authority)

Notify a data breach:

1. Fill in the form (docx)
2. In case of cross-border data breach, please fill in the additional form (docx)
3. Send the form(s) by email: prijava-krsitev@ip-rs.si

The data breach notification is accepted in Slovenian.

Agencia Española de Protección de Datos
(Spanish Data Protection Authority)

Notify a data breach:

• Fill in the online form
• Only for controllers not established in the Union, fill in the pdf form completely, digitally sign and submit to brechas@aepd.es
  • Spanish form
  • English form

The data breach notification is accepted in Spanish or English.

Integritetsskyddmyndigheten
(Swedish Data Protection Authority)

Notify a data breach:

• in Swedish
• in English

The data breach notification is accepted in Swedish or English.