For organisations reporting a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

Organisations that provide a service letting members of the public to send electronic messages should report personal data breaches here.

For Trust Service Providers and Qualified Trust Service must report notifiable breaches to us.

For individuals reporting breaches of personal information, or on behalf of someone else.

For relevant Digital Service Providers who must notify the ICO of an incident under the NIS Regulations.