Skip to content

Buy to download

This page shows a preview. Buy the document on nerix.ai to download it as Word and PDF and print it.

https://nerix.ai/templates/data-breach-notification-to-individuals

Data breach notification to people affected

Tell the people affected by a data breach what happened, what it means for them and what to do next.

Fill it in and preview

€2.99, pay once, Word and PDFIncluded in every paid nerix plan.

Notice of a data breach

Brightwater Analytics
20 April 2027

Dear Maria Santos,

We are writing to tell you about a security incident that involved some of your personal information, and what you can do. We are sorry that this happened.

What happened

On 14 April 2027 we found that Someone outside the company used a stolen password to get into our customer account system. We stopped the access on 14 April.

When: between 9 and 13 April 2027

What information was involved

Your name, email address, phone number and the last four digits of your card.
Not involved: full card numbers, passwords, or identity documents.

The full document unlocks when you download

The rest is written and waiting, with your answers in place.

Templates are a careful starting point, not legal advice. Where the law matters, check what applies where you are.

Company and legal

What this template is for

A clear letter to tell people their personal data was exposed: what happened, what data, the risks, what you did and what they should do. Fill it in online.

It is free to fill in online and needs no account. The finished Word document and PDF cost €2.99, paid once. See all Company and legal templates

Company and legal

What you fill in

The form asks for 14 details. The document fills itself in as you type.

  • Company name

    For example: Brightwater Analytics

  • Recipient's name

    For example: Maria Santos

  • Date of the letter

    For example: 20 April 2027

  • Date you found out

    For example: 14 April 2027

  • When it happened (optional)optional

    For example: between 9 and 13 April 2027

  • What happened

    Plain facts, in a few sentences. Do not guess at the cause.

    For example: Someone outside the company used a stolen password to get into our customer account system. We stopped the access on 14 April.

  • What information was involved

    Say what was and was not included.

    For example: Your name, email address, phone number and the last four digits of your card. Not involved: full card numbers, passwords, or identity documents.

  • What this could mean for you

    For example: You may receive emails or calls pretending to be from us or your bank. Your accounts with us were not opened by the attacker.

  • What we have done

    For example: Blocked the access, reset all passwords, brought in outside security experts, and told the data protection authority.

  • What you can do

    Specific, helpful steps, one per line.

    For example: Change your password here and anywhere you use the same one Be careful with unexpected messages that ask for money or details Watch your card statements and tell your bank if you see anything strange

  • Help you offer (optional)optional

    For example: 12 months of free credit monitoring: use the code in the enclosed card

  • Contact for questions

    For example: privacy@brightwater.example or +351 21 000 0000, weekdays 9:00 to 17:00

  • Authority informed (optional)optional

    For example: We have told the national data protection authority.

  • Signed by (name and title)

    For example: Daniel Ferreira, Managing Director

Company and legal

What is inside

The parts of this document, in order.

  1. 1What happened
  2. 2What information was involved
  3. 3What this could mean for you
  4. 4What we have done
  5. 5What you can do
  6. 6Questions

Templates

How it works

  1. 01

    Fill in

    Type your details in the form. The document fills itself in as you type; click any gap to jump to its field.

  2. 02

    Check

    Read it through. Gaps you have not filled stay marked, so nothing goes out half done.

  3. 03

    Download

    Pay once and get it as a Word document to edit further and as a PDF to send or print. The link comes by email too.

Company and legal

Questions people ask

What details does this template ask for?

The form asks for 14 details, starting with Company name, Recipient's name, Date of the letter, Date you found out, What happened. 3 more are optional.

How much does this template cost?

€2.99, paid once. Filling it in and seeing the first part is free. You pay when you download the finished Word document and PDF, with no account and no subscription. Every paid nerix plan includes it.

Can I download this template as Word or PDF?

Yes. When you have filled in the form, press Download and pay once. You get the finished document as a Word file to keep editing and as a PDF to send or print, and the link by email.

Is what I type sent anywhere?

While you fill it in, what you type stays in your browser. When you buy the document, your answers go to nerix to make your files. They are kept for seven days so you can download again, then deleted.

What should I check before I use this template?

This is a template, not legal advice. Many places require you to tell the regulator and the people affected, within a set time and with set content. Check the law where you and the people live, and ask a lawyer or your data protection officer before sending.

Are these company templates free?

Most are. Fill in and download them for free as Word or PDF, with no account. A few longer documents are premium: free to fill in, paid once to download, and marked with their price.

Is a template the same as legal advice?

No. A template is a careful starting point. Company, contract and data protection law differ by country, so have a lawyer read anything that carries real risk before you sign.

Can I change the clauses?

Yes. Download the Word version and edit it, or open the template in the nerix chat and ask for a clause that is stricter, shorter or in another language.
  • Quality and audits7 min read

    GDPR checklist for small businesses

    A GDPR checklist for small businesses, article by article. Lawful basis, privacy notice, processors, security, 72 hour breach reports and data subject requests.