EDPB adopts a harmonised GDPR Article 33 breach-notification template; consultation open to 5 August

The European Data Protection Board adopted a common EU/EEA template for personal-data-breach notifications under GDPR Article 33 at its 10 June 2026 plenary, opening it for public consultation until 5 August 2026 (EDPB, 2026-06-10). The template provides predefined fields aligned to Article 33 content requirements (categories of data and data subjects, approximate number of individuals affected, likely consequences, and measures taken) and is intended to replace the current patchwork of national DPA forms, reducing notification friction for cross-border incidents and for smaller organisations without dedicated DPOs (EDPB template, 2026-06-10). After the consultation closes the EDPB will set an adoption timeline for national authorities.