Can NetSenX prepare a GDPR Article 33 breach notification?
Yes, as a draft for your data protection officer; deciding and submitting stay with you. From the incident data, NetSenX prepares a draft with what the network shows: when the problem was detected and which devices and destinations were involved. Article 33(3) also asks for information only you have, such as the categories and approximate numbers of people and records affected, the likely consequences, the measures taken and the contact details of your DPODPO: data protection officer. The person responsible for data protection in a company under the GDPR.. Network evidence has limits: NetSenX sees connections, volumes and destinations, not which files or records left, so the DPO must complete the content from other sources. The draft saves time on Friday evening when the 72-hour clock is running, and keeps the facts consistent with your NIS2NIS2: the EU's second Network and Information Security directive. The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies. reports. Check it, complete it and file it with your supervisory authority yourself.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- Does a security tool's audit log help with IT general controls?
- How do we prove who changed a security setting, and when?
- How do we show an auditor which parts of our network are monitored?
- What does network detection miss if a segment is not mirrored?
- What should an incident log contain for a NIS2 audit?
Terms used here
- DPO (data protection officer)
- The person responsible for data protection in a company under the GDPR.
- NIS2 (the EU's second Network and Information Security directive)
- The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies.
← All 35 questions on Incident reporting deadlinesAll topics