Document template · eu.gdpr.data_breach_notification_subject
Data Breach Notification to Data Subjects
- Render-verified
- Legal-sensitive
- Version 1.0.0
Notification to affected data subjects in clear and plain language when a personal data breach is likely to result in a high risk to their rights and freedoms. Must be made without undue delay.
JSON Schema
Fields in this template
Data sent to the API is validated against the template’s JSON Schema before anything is rendered. This template defines 28 fields:
| Field | Required | Type | Description |
|---|---|---|---|
| reference | Optional | string | |
| notification_date | Optional | date | |
| controller | Required | object | |
| controller.name | Required | string | |
| controller.address | Optional | string | |
| controller.contact_email | Required | string | |
| controller.dpo_name | Optional | string | |
| controller.dpo_email | Optional | string | |
| data_subject | Required | object | |
| data_subject.name | Required | string | |
| data_subject.email | Optional | string | |
| data_subject.reference | Optional | string | |
| breach | Required | object | |
| breach.occurred_on | Optional | date | |
| breach.discovered_on | Optional | date | |
| breach.description | Required | string | Plain-language description, no jargon. |
| data_affected | Required | array of string | What specifically is affected for THIS data subject (not the full breach scope). |
| consequences | Required | string | |
| measures_taken | Optional | array of string | |
| recommended_actions | Required | array of string | |
| authority_notified | Optional | object | |
| authority_notified.name | Optional | string | |
| authority_notified.notified_on | Optional | date | |
| support_contact | Optional | string | |
| status_page_url | Optional | string | |
| signatory | Optional | object | |
| signatory.name | Optional | string | |
| signatory.title | Optional | string |
POST /render
Generate it
One POST /render call: send your JSON, get the finished PDF back. Or skip the JSON entirely and describe the document in plain language on chut.app.
curl -X POST https://api.papii.eu/render \
-H "X-API-Key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"template": "eu.gdpr.data_breach_notification_subject",
"data": { ... },
"options": {"language": "en"}
}' -o data-breach-notification-subject.pdf Frequently asked questions
What is “Data Breach Notification to Data Subjects”?
Notification to affected data subjects in clear and plain language when a personal data breach is likely to result in a high risk to their rights and freedoms. Must be made without undue delay. On papii this document is available as template eu.gdpr.data_breach_notification_subject: a JSON Schema plus a deterministic PDF renderer, so the same data always produces the same document.
Can I generate a Data Breach Notification to Data Subjects with AI?
Yes. chut.app — the AI back office papii powers — fills this template from a plain-language description: you describe the document in one sentence, the AI structures the data, papii validates it against the schema and renders the PDF. Developers can also call the papii API directly with structured JSON.
Is the Data Breach Notification to Data Subjects template legally compliant?
This template is render-verified: its schema, sample data and PDF output are automatically tested on every release. It is published with status “ready”, meaning it has not yet been through papii’s final legal review. Where it references specific legislation, that is stated in the template description — always have a professional check documents with legal effect before relying on them.