{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["611/2013 — Implementing act — Notification of personal data breaches [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches/annexes/annex-i","url":"https://www.headlesslaw.com/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches/annexes/annex-i","title":"ANNEX I","family":"l2_unit_view","work_id":"spaces/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches","view_of":"/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Commission Regulation (EU) No 611/2013, OJ L 173, 26.6.2013","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg/2013/611/oj/eng","valid_from":"2013-08-25","valid_until":null,"content_id":"7b2812f4d0cded83","versions":["2013-08-25"],"version_url":"https://www.headlesslaw.com/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches/annexes/annex-i/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches/annexes/annex-i/versions/2026-10-26/rev/7b2812f4d0cded83","versions_url":"https://www.headlesslaw.com/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches/annexes/annex-i/versions","relations_url":"https://www.headlesslaw.com/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches/annexes/annex-i/relations","act_url":"https://www.headlesslaw.com/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches#annex-i","source_line":"Commission Regulation (EU) No 611/2013 · binding · OJ L 173, 26.6.2013 · dated 24 Jun 2013 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2013-06-24","entry_into_force":"2013-08-25","locators":{"document_date":"CELLAR 32013R0611 work_date_document","entry_into_force":"CELLAR 32013R0611 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches","path":"/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches","name":"Commission Regulation (EU) No 611/2013","number":"611/2013","celex":"32013R0611","title_official":"COMMISSION REGULATION (EU) No 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications","document_date":"2013-06-24"},"position":{"kind":"annex","key":"annex-i","index":1,"articles":7,"annexes":2},"prev":{"path":"/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches/articles/7","key":"7","title":"Article 7 — Entry into force"},"next":{"path":"/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches/annexes/annex-ii","key":"annex-ii","title":"ANNEX II"},"act_anchor":"#annex-i"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg/2013/611/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches.md","unit_text_sha256":"81d3652a06fe5d117421b6bf8cf734948d8257814c056838684bffa4ac1dd8f5","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/eprivacy/level-2/implementing-acts/611-2013-notification-of-personal-data-breaches/annex-i","kind":"annex","key":"annex-i","heading":"ANNEX I","text":"## ANNEX I\n\n<a id=\"annex-i\"></a>Content of the notification to the competent national authority\n\nSection 1\n\nIdentification of the provider\n\n1.\n\nName of the provider\n\n2.\n\nIdentity and contact details of the data protection officer or other contact point where more information can be obtained\n\n3.\n\nWhether it concerns a first or second notification\n\nInitial information on the personal data breach (for completion in later notifications, where applicable)\n\n4.\n\nDate and time of incident (if known; where necessary an estimate can be made), and of detection of incident\n\n5.\n\nCircumstances of the personal data breach (e.g. loss, theft, copying)\n\n6.\n\nNature and content of the personal data concerned\n\n7.\n\nTechnical and organisational measures applied (or to be applied) by the provider to the affected personal data\n\n8.\n\nRelevant use of other providers (where applicable)\n\nSection 2\n\nFurther information on the personal data breach\n\n9.\n\nSummary of the incident that caused the personal data breach (including the physical location of the breach and the storage media involved):\n\n10.\n\nNumber of subscribers or individuals concerned\n\n11.\n\nPotential consequences and potential adverse effects on subscribers or individuals\n\n12.\n\nTechnical and organisational measures taken by the provider to mitigate potential adverse effects\n\nPossible additional notification to subscribers or individuals\n\n13.\n\nContent of notification\n\n14.\n\nMeans of communication used\n\n15.\n\nNumber of subscribers or individuals notified\n\nPossible cross-border issues\n\n16.\n\nPersonal data breach involving subscribers or individuals in other Member States\n\n17.\n\nNotification of other competent national authorities\n\n","marks":[],"text_hash":"81d3652a06fe5d117421b6bf8cf734948d8257814c056838684bffa4ac1dd8f5","revision":1}}