Digital Policy Alert logo

European Union: Updated Guidelines on personal data breach notification under GDPR

Progress

Current status
adopted
28 Mar 2023 adopted
29 Oct 2022 in consultation
18 Oct 2022 in consultation
10 Oct 2022 adopted

Scope

Implementers
Austria
Belgium
Bulgaria
Croatia
Cyprus
Czechia
Denmark
Estonia
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Netherlands
Poland
Portugal
Romania
Slovakia
Slovenia
Spain
Sweden
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
data protection authority
Implementation Level
supranational

Timeline of events

28 Mar 2023
adopted

Adopted Version 2 of Guidelines on personal data breach notification under GDPR

On 28 March 2023, the European Data Protection Board (EDPB) adopted the Version 2 of the Guidelines 09/2022 on personal data breach notification under GDPR, amending the guidelines to specify the obligations of data controllers concerning data breac…

Source
Event type outline
Action type adoption
Government branch executive
Government body data protection authority
29 Oct 2022
in consultation

Consultation closed on amendment of Guidelines on personal data breach notification under GDPR

On 29 November 2022, the public consultation on the European Data Protection Board (EDPB) updated "Guidelines 09/2022 on personal data breach notification under GDPR" closed. The EDPB amended paragraph 73 of the previous Guidelines to specify the da…

Source
Event type outline
Action type consultation opened
Government branch executive
Government body data protection authority
18 Oct 2022
in consultation

Opened consultation on amendment to Guidelines on personal data breach notification under GDPR

On 18 October 2022, the European Data Protection Board (EDPB) opened a consultation on the updated "Guidelines 09/2022 on personal data breach notification under GDPR". The EDPB amended paragraph 73 of the previous Guidelines to specify the data bre…

Source
Event type outline
Action type consultation opened
Government branch executive
Government body data protection authority
10 Oct 2022
adopted

Adopted amendment to Guidelines on personal data breach notification under GDPR

On 10 October 2022, the European Data Protection Board (EDPB) adopted the "Guidelines 09/2022 on personal data breach notification under GDPR". The EDPB amended paragraph 73 of the previous Guidelines to specify the data breach reporting obligations…

Source
Event type outline
Action type adoption
Government branch executive
Government body data protection authority