Data Breach

The Regulation 1725/2018 introduces a duty on all EU Institutions and bodies to report certain types of personal data breach to the EDPS. They must do this within 72 hours of becoming aware of the breach, where feasible.
If the breach is likely to result in a high risk of adversely affecting individuals’ rights and freedoms, they must also inform those individuals without undue delay. All EU institutions and bodies should ensure that they have the procedures that enable them to detect a breach, investigate, take the necessary corrective measures and report. They must keep a record of any personal data breaches, regardless of whether they are required to notify the EDPS.

Filters

Filter by Publication Year

Filter by Tags

Filter by Institution

Filter by Publication Type

Dec

2024

Reports

PATRICIA Exercise 2024 - Personal dATa bReach awareness In Cybersecurity Incident hAndling

On 3 October 2024, the European Union Agency for Cybersecurity (ENISA) and the European Data Protection Supervisor (EDPS) jointly organised a table-top exercise titled “Personal dATa bReach awareness In Cybersecurity Incident hAndling” (PATRICIA). The event, hosted at the EDPS premises in Brussels, aimed to raise awareness among staff from European Union Institutions, Bodies, and Agencies (EUIs) on managing personal data breaches.

Available languages: English

Topics

Data Breach

Cybersecurity

Oct

2024

Events

PATRICIA - Personal dATa bReach awareness in Cybersecurity Incident Handling

EDPS and ENISA are co-organising the cyber exercise PATRICIA - Personal dATa bReach awareness in Cybersecurity Incident Handling, a table-top exercise focusing on personal data breach management. This initiative is organised in the framework of the EDPS 20th-anniversary activities and European Cybersecurity Month Campaign on 3 October 2024 from 08:45 to 16:00 in the EDPS premises.

Topics

Data Breach

Cybersecurity

May

2024

Administrative notices

Vacancy Notice EDPS 02/2024

Data Breach Notification and Investigation Officer- CA (1 year renewable) FGIV - Technology and Privacy Unit - Deadline for submitting the applications via the following application form is June 7th, 2024, (Brussels time GMT+1) at 12:00 (midday).

Vacancy Notice

Available languages: English

Data Protection Notice

Available languages: English

Topics

Administrative and Human Resources

Data Breach

Access to documents
Administrative and Human Resources
Article 7 - right to private life
Binding Corporate Rules
Biometrics
Money laundering
C-ITS
Case Management System
ECHR
CJEU
Communication
Computer Forensics
Council of Europe
Data retention
COVID-19
Data Breach
Right of Information
EU Passengers Name Record
Europol
Finance
IT at Work
IT
Tracking
Management of the EDPS
mHealth
PETs
Physical Security
Public Events
Regulation 2018/1725
Safe Harbour
SIS
SIS SCG
Staff Committee
Supervision by EDPS
Surveys
Article 8 - right to data protection
Right of Access
Blockchain
Encryption
Standard Contractual Clauses
Clinical Trials
Convention 108
Tax cooperation
ECtHR
Cybersecurity
Investigations
eCall
ECRIS
PNR
OECD
Profiling
VIS
VIS SCG
Adequacy Decision
Anti-fraud
Cloud Computing
EDPB - 29WP
Cybercrime Convention
Counter-terrorism
Drones
Right to Rectification
Eurodac
Eurodac SCG
Tax evasion
Privacy Shield
Mobile Devices & Apps
CIS
CIS SCG
Umbrella Agreement
Right to Erasure
Financial markets
United Nations
Recruitment
IMI
Open Data
Right to Restriction of Processing
Staff Evaluation
IMI SCG
TTIP
Working Conditions
Smart Meters
Data Portability
EES
Procurements, Grants, Experts
Right to Object
Social Networks
Automated Individual Decision-Making
Health Data in the Workplace
Anti-harassment
Data Protection Officer
Conflicts of Interest
Security & Access to Premises
Net Neutrality
Encryption
Artificial Intelligence
Ethics
Robotics
Charter of Fundamental Rights
General Data Protection Regulation
Police Directive
ePrivacy Directive
Regulation 45/2001
Rights of the Individual
Necessity & Proportionality
Privacy by Design
Interoperability
Privacy by Default
Accountability
International Agreements
International Standards
International Cooperation
Case-law and litigation
Transfers of data
Supervision coordination
Large-Scale IT Systems
Information Security
Big Data & Digital Clearinghouse
Internet of Things
Personal Information Management System
IPEN
eGovernment
Borders, Asylum, Migration
Common Foreign and Security Policy
Competition
Consumers
Finance & Economy
Health
Internal Market
Digital Single Market
Judicial Cooperation
Police Cooperation
Electronic Communications, Information Society
Research & Science
Transport
Privacy in the EU Institutions
Transparency
Whistleblowing
Surveillance
Security
Technologies

Agency for the Cooperation of Energy Regulators (ACER)
Body of European Regulators for Electronic Communications (BEREC)
Clean Sky Joint Undertaking (CSJU)
Committee of the Regions (CoR)
Community Plant Variety Office (CPVO)
Consumers, Health and Food Executive Agency (CHAFEA)
Council of the European Union
Court of Justice of the European Union (CJEU)
ECSEL Joint Undertaking (ECSEL)
eu-LISA
European Agency for Safety and Health at Work (EU-OSHA)
European Anti-Fraud Office (OLAF)
European Asylum Support Office (EASO)
European Aviation Safety Agency (EASA)
European Banking Authority (EBA)
European Border and Coast Guard Agency (FRONTEX)
European Central Bank (ECB)
European Centre for Desease Prevention and Control (ECDC)
European Centre for the Development of Vocational Training (Cedefop)
European Chemicals Agency (ECHA)
European Climate, Infrastructure and Environment Executive Agency (CINEA)
European Commission
European Court of Auditors (ECA)
European Data Protection Board (EDPB)
European Data Protection Supervisor (EDPS)
European Defence Agency (EDA)
European Economic and Social Committee (EESC)
European Education and Culture Executive Agency (EACEA)
European Environment Agency (EEA)
European External Action Service (EEAS)
European Fisheries Control Agency (EFCA)
European Food Safety Authority (EFSA)
European Foundation for the Improvement of Living and Working Conditions (Eurofound)
European GNSS Agency (GSA)
European Health and Digital Executive Agency (HaDEA)
European Innovation Council and SMEs Executive Agency (EISMEA)
European Institute for Gender Equality (EIGE)
European Institute of Innovation and Technology (EIT)
European Insurance and Occupations Pensions Authority (EIOPA)
European Investment Bank (EIB)
European Investment Fund (EIF)
European Labour Authority (ELA)
European Maritime Safety Agency (EMSA)
European Medicines Agency (EMA)
European Ombudsman (Ombudsman)
European Parliament
European Personnel Selection Office (EPSO)
European Police College (CEPOL)
European Police Office (EUROPOL)
European Public Prosecutor's Office (EPPO)
European Research Council Executive Agency (ERCEA)
European Research Executive Agency (REA)
European Securities and Markets Authority (ESMA)
European Systemic Risk Board (ESRB)
European Training Foundation (ETF)
European Union Agency for Fundamental Rights (FRA)
European Union Agency for Network and Information Security (ENISA)
European Union Agency for Railways (ERA)
European Union Drugs Agency
European Union Institute for Security Studies (EUISS)
European Union Intellectual Property Office (EUIPO)
European Union Satellite Centre (EUSC)
Fuel Cells & Hydrogen Joint Undertaking (FCHJU)
Fusion for Energy (F4E)
Innovative Medicines Initiative Joint Undertaking (IMI JU)
Joint Research Centre (JRC)
Office for Harmonisation in the Internal Market (OHIM)
Other
SESAR Joint Undertaking (SESAR JU)
Single Resolution Board (SRB)
The European Union's Judicial Cooperation Unit (EUROJUST)
Translation Centre for the Bodies of the European Union (CdT)

Administrative notices
EDPS-EDPB Joint Opinions
Book
Data Protection Notices & Records
DPO Meetings and Trainings
International Transfers
TechDispatch
Memorandum of Understanding
Resolutions
Reference Library
European Conferences
DPO News
Events
International Conferences
Legislation
Reports
Priorities
Press Releases
Opinions Prior Check and Prior Consultations
Other Documents
Papers
SCG Documents
Speeches & Articles
Strategy
Opinions Non Prior Check
Opinions
Code of Conducts
Formal Comments
Supervisory Opinions
Call for Tenders
Brochures
Annual Activity Reports
Annual Reports
Court Cases
Investigations
Audits
Newsletters
Guidelines
Forms
Ethical Framework
Factsheets
Administrative Measures