The EDPS has issued guidelines on personal data breach notification for the EU institutions and bodies.
Under the new Regulation (EU) 2018/1725, all European institutions and bodies have a duty to report certain types of personal data breaches to the EDPS.