Additional Points about Notification

  • You can notify the ICO by calling them on 0303 123 1113 (9am to 5pm Monday to Friday)
  • You can also download a personal data breach form from the ICO website
  • Once completed the form can be:
    • submitted by email to with Personal Data Breach Notification in the subject header field or
    • sent by post directly to the ICO
  • For health sector breaches in England organisations should report breaches using the Data Security and Protection Incident Reporting tool (see
  • When a significant cyber incident occurs, a report may need to be sent to the National Cyber Security Centre (NCSC)