Report a Data Breach

Use this form to report a personal information security compromise. Your report is recorded in the organisation's breach register for the Information Officer.

Provide as much detail as you can. The Information Officer will assess risk, containment, and notification duties under POPIA Section 22 and EDPB guidance. Do not include unnecessary full personal data of affected individuals in free-text fields.

Detection & Awareness

Record when and how the organisation became aware of the incident (EDPB Art. 33 / POPIA S22).

Incident Title *

Date/Time Discovered *

Date/Time Organisation Became Aware *

The 72-hour regulator notification clock starts from this date (EDPB).

Reported By *

Email *

Breach Type (CIA)

Nature of Incident

Description of the Security Compromise *

Categories of Personal Information Affected

Approximate Number of Data Subjects

Approximate Number of Records

Containment Measures Taken

Optional: describe any immediate steps already taken (e.g. account locked, email recalled, device isolated).

Cancel

This Information Officer Portal comprises several components designed to assist information officers perform their duties and engage with data subjects.