This form is for organisations that have experienced a data breach. If you are an individual wanting to report a breach of your personal information, please use our Data protection and personal information complaints tool.
If you are unsure whether your incident meets the threshold to report, call our helpline on 0303 123 1113. It could save you time, as you may not need to report. We can also provide advice about steps to take following the breach.
How to report a breach online
This form should take approximately 30 minutes to complete.
Please ensure you have all the details regarding the breach ready before you start – you can't save the form and return at a later date.
If you are in a rush, you can give us the basic information and then share further details via email later.
Before submitting your report, you will be able to view your answers and edit them if necessary. We will then send you a copy of your completed form once submitted.
Before you start
Please ensure you have the following information ready:
- Details of the breach – a general overview of the breach, the date and time it happened and when you found out about it.
- Details of staff members – was a specific member of staff involved and what data protection training they’ve had.
- Details of the data and people affected – how much data and how many people have been affected and the possible risk to individuals as a result of the breach.
- Your efforts to contain the breach - what preventative measures were in place beforehand, what actions you’ve taken to stop it happening again and what other organisations you have told, or need to tell about the breach.
The information you provide must be accurate. You should give us as much detail as possible in this form. However, you can submit additional information afterwards by email.
For information on how we process your data, read our privacy notice.