In the Cost of Data Breach Report 2021, IBM reported that customers’ personally identifiable information was included in 44% of breaches, making it the most common type of record lost. If your organization has been affected by a data breach, you must report the incident to the relevant authorities as per the applicable regulations. No one is exempt from GDPR breach reporting; even Amazon received a whopping $888 million (€746 million) GDPR violation fine in July 2021!
The General data protection regulation (GDPR) is a data privacy regulation that went into effect on May 25, 2018 to protect the data privacy and integrity of the people located in the European Union (EU). The act applies to virtually all organizations that gather, process and/or store the data of these covered individuals for commercial or professional purposes, regardless of whether the organization collecting the data is located in the EU.
If your organization experiences a data breach, you need to report the breach in accordance with the rules outlined by GDPR. In our previous article, we explained what the GDPR reporting requirements are. In this article, we’ll look at two examples of GDPR data breach notifications. But first, we’ll walk you through what information to include and explore a GDPR breach notification template to help you notify affected parties.