brecha

You must notify the AEPD of a data breach within 72 hours of becoming aware of it by providing incident details, risk assessment, and required legal fields per RGPD article 33. This includes documenting the nature of the breach and the approximate number of affected data subjects.

You need to communicate a personal data breach to affected individuals when the risk to their rights and freedoms is high, as mandated by RGPD article 34. The notification must describe the breach's nature and advise on protective measures they can take.

You assess the risk level of a data security incident by evaluating the data type, the volume of affected records, and the impact on confidentiality, integrity, and availability. This framework determines whether AEPD notification and data subject communication are legally required.

Immediately after detecting a data leak, you should follow an incident response workflow that includes containment, evidence preservation, and internal documentation. These initial steps secure the affected systems and establish the baseline facts needed for RGPD risk assessment.

An RGPD breach notification to the AEPD must include the nature of the personal data breach, the categories and approximate number of affected data subjects and records, the likely consequences, and the measures taken or proposed to address it. These fields fulfill article 33 requirements.

Yes, you can generate legal templates for both AEPD notification and data subject communication from a single incident description. By inputting the breach facts and risk evaluation, the system produces structured drafts containing the exact fields required by RGPD articles 33 and 34.