@component('mail::message')
# Personal Data Breach Notification — GDPR Article 33

**DRAFT — Review before submission to supervisory authority**

**To:** Data Protection Authority (Supervisory Authority)

**From:** {{ $appName }} — {{ $appUrl }}

**Date:** {{ now()->toFormattedDateTimeString() }}

---

## Notification of Personal Data Breach (Art. 33(3))

Pursuant to Article 33 of the General Data Protection Regulation (EU) 2016/679, we hereby notify you of a personal data breach affecting our service.

@component('mail::panel')
### (a) Nature of the Breach

**Description:** {{ $incident->description }}

**Severity:** {{ ucfirst($incident->severity) }}

**Date/time breach was detected:** {{ $detectedAt }}

**GDPR 72-hour notification deadline:** {{ $deadline }}

**Approximate number of data subjects affected:** {{ $incident->affected_count }}

**Categories of data affected:** User account data (email addresses, usage data)
@endcomponent

@component('mail::panel')
### (b) Data Protection Officer / Controller Contact

**Organisation:** {{ $appName }}

**Contact:** Please reply to this email or visit {{ $appUrl }}
@endcomponent

@component('mail::panel')
### (c) Likely Consequences of the Breach

The breach may expose affected data subjects to risks including unsolicited communications, account enumeration, or credential stuffing attacks. We are monitoring for any signs of misuse.
@endcomponent

@component('mail::panel')
### (d) Measures Taken or Proposed

We have taken the following steps:

1. Identified and isolated the source of the breach
2. Revoked or rotated any exposed credentials
3. Notified affected data subjects in accordance with Art. 34
4. Commenced a full internal security review
5. Implemented additional access controls to prevent recurrence
@endcomponent

This notification is provided in accordance with GDPR Article 33. We will provide supplementary information as our investigation progresses.

Yours sincerely,<br>
{{ $appName }} Data Protection Officer
@endcomponent