Data breach register

In accordance with Article 32 of Law no. 1.565 of December 3, 2024, the data controller must document any personal data breach of which it is the victim, even when it is not required to notify the ADPD.

To help you with this process, a model register (in French) in Excel format is available here.

Two documents are also available to help you manage a data breach and assess the risk of a data breach in 5 steps.

In addition, a factsheet entitled The main data breaches: obligations and advice on how to prevent them is also available.