Can NetSenX prepare a GDPR Article 33 breach notification?

Yes, as a draft for your data protection officer; deciding and submitting stay with you. From the incident data, NetSenX prepares a draft with what the network shows: when the problem was detected and which devices and destinations were involved. Article 33(3) also asks for information only you have, such as the categories and approximate numbers of people and records affected, the likely consequences, the measures taken and the contact details of your DPODPO: data protection officer. The person responsible for data protection in a company under the GDPR.. Network evidence has limits: NetSenX sees connections, volumes and destinations, not which files or records left, so the DPO must complete the content from other sources. The draft saves time on Friday evening when the 72-hour clock is running, and keeps the facts consistent with your NIS2NIS2: the EU's second Network and Information Security directive. The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies. reports. Check it, complete it and file it with your supervisory authority yourself.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

Read next

Terms used here

DPO (data protection officer)
The person responsible for data protection in a company under the GDPR.
NIS2 (the EU's second Network and Information Security directive)
The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies.

← All 35 questions on Incident reporting deadlinesAll topics