This form is for controllers who need to report a personal data breach of The Data Protection (Bailiwick of Guernsey) Law, 2017 to the Office of the Data Protection Authority (ODPA). It should not take you more than 15 minutes to complete. Please note that whilst you are only legally obliged to report breaches that meet certain legal criteria we still encourage all incidents to be reported to us.
Please provide as much (anonymised) information as you can, and ensure all mandatory fields are completed.
If you cannot answer questions because you do not know the answer, or you are waiting on further information pending the completion of an internal investigation, please set that out in your response.
After a personal data breach, swift containment and recovery of the situation is vital. You should make every effort to minimise the potential impact on the people whose data has been affected, and details of the steps taken to achieve this should be included in this form.