EDPB adopts a harmonised GDPR Article 33 breach-notification template; consultation open to 5 August

The European Data Protection Board adopted a common EU/EEA template for personal-data-breach notifications under GDPR Article 33 at its 10 June 2026 plenary, opening it for public consultation until 5 August 2026 (EDPB, 2026-06-10). The template provides predefined fields aligned to Article 33 content requirements — categories of data and data subjects, approximate number of individuals affected, likely consequences, and measures taken — and is intended to replace the current patchwork of national DPA forms, reducing notification friction for cross-border incidents and for smaller organisations without dedicated DPOs (EDPB template, 2026-06-10). After the consultation closes the EDPB will set an adoption timeline for national authorities.