Data Breach Notification Letter - Document Builder 👷‍♂️

Please enable JavaScript in your browser to complete this form.

Generator Prompt

Document Type

Source URL

🌍 Jurisdiction & Basics

Country, language, governing law region, and the notifying organization details.

Country *

Language of the completed document *

Governing state/province/region (if applicable)

Notifying organization/legal entity name *

Organization address

Contact email for follow-up *

Contact phone (optional)

Recipient version to generate *

Customer/Individuals
Regulator/Supervisory Authority

🚨 Incident Overview

What happened, when it was discovered, and current containment status.

Type of incident *

Date incident discovered *

Date

Time

Estimated incident start date (if known)

Date

Time

Estimated incident end/containment date (if known)

Date

Time

Containment status *

Brief plain-language summary of what happened *

🧾 Affected Data & Individuals

Who may be affected and what data categories were involved.

Estimated number of individuals affected (or range)

Categories of personal data involved (select all that apply)

Name and contact details
Government ID / passport / national ID
Financial account or payment card details
Login credentials (username/password)
Health/medical information
Biometric data
Children’s data
Employment/HR data
Location data
Other

Were any special-category/sensitive data involved? *

No
Yes
Unknown

If yes, describe the sensitive/special-category data involved

Systems/services impacted (if known)

Root cause (if known) and how access occurred

🧪 Risk & Harm Assessment

Assess likely risks to individuals and the seriousness of the breach.

Potential risks to individuals (select all that apply)

Identity theft / fraud
Financial loss
Account takeover
Phishing / scams
Reputational harm
Discrimination
Physical safety risk
Other

Overall risk level *

Why you assessed the risk this way (brief)

🛠️ Mitigation & Support

What you’ve done and what recipients should do next.

Steps taken to contain and remediate *

Steps individuals/customers should take (recommended actions)

Are you offering credit monitoring / identity protection? *

If yes, provide provider, duration, eligibility, and enrollment instructions

🏛️ Regulator Version Details

Only for regulator/supervisory authority notifications.

Regulator/supervisory authority name

Regulator office address (optional)

Reference/incident number (if any)

Date of this notification *

Date

Time

Legal basis/threshold statement (why notification is required)

If notifying late, explain reasons for delay (if applicable)

👤 Customer/Individual Version Details

Only for notifying customers/individuals.

Customer/recipient name (or 'Valued Customer')

Customer account/order/reference (optional)

Relationship/context (what service or engagement this relates to)

What information of theirs may have been involved (plain language)

📝 Letter Style & Inserts

Tone, optional sections, and jurisdiction-sensitive wording preferences.

Tone of the letter *

Include a short apology statement? *

Include a short FAQ section? *

Any required legal phrases or internal wording to include (optional)

✍️ Sign-off

Who is sending the letter and how recipients can reach you.

Signer full name *

Signer title/role *

Support contact name/department (optional)

Support contact email (optional)

Support contact phone (optional)

Signature date *

Date

Time

📎 Attachments & Acknowledgements

Upload supporting documents and confirm key points.

Upload supporting documents (optional)

Drag & Drop Files, Choose Files to Upload You can upload up to 5 files.

Acknowledgements *

I confirm the information provided is accurate to the best of my knowledge.
I understand the generated letter is a template and may need review for local legal compliance.