Print

Data Breach

The Regulation 1725/2018 introduces a duty on all EU Institutions and bodies to report certain types of personal data breach to the EDPS. They must do this within 72 hours of becoming aware of the breach, where feasible.
If the breach is likely to result in a high risk of adversely affecting individuals’ rights and freedoms, they must also inform those individuals without undue delay. All EU institutions and bodies should ensure that they have the procedures that enable them  to detect a  breach, investigate, take the necessary corrective measures and report. They must keep a record of any personal data breaches, regardless of whether they are required to notify the EDPS.

 

Filters

6
May
2021
Factsheets

Personal Data Breaches in a Nutshell

 

Image of the coverpage of the fachsheet

All EU institutions, offices, bodies and agencies process personal data to recruit staff, pay salaries or negotiate service contracts, for example. If this personal data is lost, stolen or obtained accidently or deliberately, it is a personal data breach. What can you do if a personal data breach occurs? When should the breach be communicated to individuals? This factsheet will help you deepen your knowledge on personal data breaches.

Available languages: German, English, French
Topics
Data Breach
19
Apr
2021
Annual Reports

Annual Report 2020

The year 2020 was unique for the world and, by extension, for the European Data Protection Supervisor (EDPS). Like many other organisations, the EDPS had to adapt its working methods as an employer, but also its work since the COVID-19 health crisis strengthened the call for the protection of individuals' privacy. 

This Annual Report provides an insight into all EDPS activities in 2020. 

HTML Version: EN

Summary (HTML): EN - FR - DE

Full text of Annual Report (PDF)
Available languages: English
Summary (PDF)
Available languages: Bulgarian, Czech, Danish, German, Estonian, Greek, English, Spanish, French, Irish, Croatian, Italian, Latvian, Lithuanian, Hungarian, Maltese, Dutch, Polish, Portuguese, Romanian, Slovak, Slovenian, Finnish, Swedish
Topics
COVID-19
Data Breach
Regulation 2018/1725
Data Protection Officer
Artificial Intelligence
Charter of Fundamental Rights
Article 7 - right to private life
Article 8 - right to data protection
General Data Protection Regulation
Necessity & Proportionality
Privacy by Design
Privacy by Default
Transfers of data
3
Jul
2020
Formal Comments

EDPS comments on the model working arrangements between the European and Coast Guard Agency and the authorities of third countries

EDPS comments on the model for working arrangements to be concluded by the European Border and Coast Guard Agency with the authorities of third countries.

Available languages: German, English, French
Topics
Data Breach
Charter of Fundamental Rights
Article 8 - right to data protection
Rights of the Individual
International Cooperation
Transfers of data
Borders, Asylum, Migration
11
Mar
2019
Events

EDPS-ENISA Conference: Towards accessing the risk in personal data breaches

The European Data Protection Supervisor and ENISA organize a conference in Brussels on the 4th of April 2019 in personal data breach notification.

The conference aims to address the aspect of assessing the risk of personal data breaches under the General Data Protection Regulation (GDPR) - (EU) 2016/679 and the Regulation (EU) 2018/1725 for the processing of personal data by EU Institutions and bodies. 

For more information and registration please follow this link.

Topics
Data Breach