Skip to content
papii

Document template · eu.gdpr.data_breach_notification_authority

Data Breach Notification to Supervisory Authority

  • Render-verified
  • Legal-sensitive
  • Version 1.0.0

Notification to be lodged with the competent supervisory authority without undue delay and, where feasible, not later than 72 hours after the controller becomes aware of the breach. Where the 72-hour deadline is missed, the notification must include the reason for the delay.

JSON Schema

Fields in this template

Data sent to the API is validated against the template’s JSON Schema before anything is rendered. This template defines 49 fields:

Field Required Type Description
reference Optional string
notification_date Optional date
notification_time Optional string Time of lodging (HH:MM local, time zone noted if relevant).
phased Optional enum Art. 33(4) allows phased notifications when full information is not yet available.
authority Optional object
authority.name Required string
authority.portal_case_number Optional string
controller Required object
controller.name Required string
controller.address Required string
controller.contact_email Required string
controller.dpo_name Optional string
controller.dpo_email Optional string
controller.dpo_phone Optional string
controller.representative Optional string
breach Required object
breach.occurred_on Required date
breach.occurred_time Optional string
breach.discovered_on Required date
breach.discovered_time Optional string
breach.description Required string
breach.nature Required array of string Art. 4(12) — breach of security leading to unauthorised disclosure, alteration, loss or access.
breach.root_cause_known Optional boolean
breach.root_cause Optional string
breach.delay_beyond_72h_reason Optional string
data_affected Required object
data_affected.data_subjects_estimated Required integer
data_affected.data_subjects_notes Optional string
data_affected.records_estimated Required integer
data_affected.records_notes Optional string

+19 more fields — the full JSON Schema is available in the dashboard and via the API.

POST /render

Generate it

One POST /render call: send your JSON, get the finished PDF back. Or skip the JSON entirely and describe the document in plain language on chut.app.

curl 
curl -X POST https://api.papii.eu/render \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "eu.gdpr.data_breach_notification_authority",
    "data": { ... },
    "options": {"language": "en"}
  }' -o data-breach-notification-authority.pdf
Generate with AI on chut.app Try in the dashboard

Frequently asked questions

What is “Data Breach Notification to Supervisory Authority”?

Notification to be lodged with the competent supervisory authority without undue delay and, where feasible, not later than 72 hours after the controller becomes aware of the breach. Where the 72-hour deadline is missed, the notification must include the reason for the delay. On papii this document is available as template eu.gdpr.data_breach_notification_authority: a JSON Schema plus a deterministic PDF renderer, so the same data always produces the same document.

Can I generate a Data Breach Notification to Supervisory Authority with AI?

Yes. chut.app — the AI back office papii powers — fills this template from a plain-language description: you describe the document in one sentence, the AI structures the data, papii validates it against the schema and renders the PDF. Developers can also call the papii API directly with structured JSON.

Is the Data Breach Notification to Supervisory Authority template legally compliant?

This template is render-verified: its schema, sample data and PDF output are automatically tested on every release. It is published with status “ready”, meaning it has not yet been through papii’s final legal review. Where it references specific legislation, that is stated in the template description — always have a professional check documents with legal effect before relying on them.