3. The notification referred to in 3. The notification referred to in 3. The notification referred to in 3. The notification referred to in paragraph 1 shall at least: paragraph 1 shall at least: paragraph 1 shall at least: paragraph 1 shall at least: (a) describe the nature of the (a) describe the nature of the (a) describe the nature of the (a) describe the nature of the personal data breach including the personal data breach including the personal data breach personal data breach including, (…); categories and number of data categories and number of data where possible, the categories and subjects concerned and the subjects concerned and the approximate number of data categories and number of data categories and number of data subjects concerned and the records concerned; records concerned; categories and approximate number of data records concerned; (b) communicate the identity and (b) communicate the identity and (b) communicate the identity and (b) communicate the name and contact details of the data contact details of the data protection contact details of the data contact details of the data protection officer referred to in officer referred to in Article 30 or protection officer or other protection officer or other contact (…) Article 30 or other contact point other contact point where more contact point where more point where more information can where more information can be information can be obtained; information can be obtained; be obtained; obtained; (c) recommend measures to (c) recommend measures to mitigate (c) deleted (…) mitigate the possible adverse the possible adverse effects of the effects of the personal data breach; personal data breach; (d) describe the possible (d) describe the possible (d) describe the likely (d) describe the likely consequences of the personal data consequences of the personal data consequences of the personal data consequences of the personal data breach; breach; breach identified by the controller, breach; (e) describe the measures proposed (e) describe the measures proposed (e) describe the measures (e) describe the measures taken or taken or or taken by the controller to address or taken by the controller to address to be taken by the proposed to be taken by the proposed the personal data breach. the personal data breach controller to address the personal controller to address the personal and data breach; and data breach, including, where mitigate its effects. appropriate, to mitigate its possible adverse effects.
3. The notification referred to in paragraph 1 shall at least: 3. The notification referred to in paragraph 1 shall at least: 3. The notification referred to in paragraph 1 shall at least: 3. The notification referred to in paragraph 1 shall at least: (a) describe the nature of the personal data breach including the categories and number of data subjects concerned and the categories and number of data records concerned; (a) describe the nature of the personal data breach including the categories and number of data subjects concerned and the categories and number of data records concerned; (a) describe the nature of the personal data breach (…); (a) describe the nature of the personal data breach including, where possible, the categories and approximate number of data subjects concerned and the categories and approximate number of data records concerned; (b) communicate the identity and contact details of the data protection officer referred to in Article 30 or other contact point where more information can be obtained; (b) communicate the identity and contact details of the data protection officer referred to in Article 30 or other contact point where more information can be obtained; (b) communicate the identity and contact details of the data protection officer (…) or other contact point where more information can be obtained; (b) communicate the name and contact details of the data protection officer or other contact point where more information can be obtained; (c) recommend measures to mitigate the possible adverse effects of the personal data breach; (c) recommend measures to mitigate the possible adverse effects of the personal data breach; (c) deleted (…) (d) describe the possible consequences of the personal data breach; (d) describe the possible consequences of the personal data breach; (d) describe the likely consequences of the personal data breach identified by the controller, (d) describe the likely consequences of the personal data breach; (e) describe the measures proposed or taken by the controller to address the personal data breach. (e) describe the measures proposed or taken by the controller to address the personal data breach and mitigate its effects. (e) describe the measures taken or proposed to be taken by the controller to address the personal data breach; and (e) describe the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, to mitigate its possible adverse effects.
4_4column_table_EN.docx