Free Breach Notification Generator
Create a data breach notice or regulator report using actual incident facts, impacts and actions. Edit supporting wording and export HTML, Word or PDF.
How to create your breach notification
Communicate confirmed facts and uncertainty in a clear incident notice.
- 01
Gather accurate details
Gather confirmed incident facts, awareness and notification dates, affected data, likely consequences, response actions and an incident contact.
- 02
Edit the relevant examples
Open each section. Keep useful sample wording where accurate, edit it or use Restore example. Required facts are marked *. Closing a section brings the next into view without discarding your answers.
- 03
Review and export
Read the complete document. Confirm the identities, dates, scope and procedures. Download editable Word or HTML, or open Print / Save PDF to create a fixed copy. Formatted copy and exports contain a link to this tool.
- 04
Deliver through the required route
Check notification thresholds, recipients, deadlines and required content for your jurisdiction and sector. Submit or deliver through the appropriate channel and keep evidence of delivery and later updates. This tool does not file a report or notify anyone.
Details specific to this document
Organisation and audience → incident timeline → affected information and consequences → actual response → recipient actions or regulator details → updates.
Optional details appear when supplied; conditional fields follow your selections. Example wording stays editable. Actual facts are not inferred from provider names, legal labels or a selected checkbox.
Scope, privacy and review
Notification thresholds, content and deadlines vary by jurisdiction and sector. This tool does not decide reportability, verify findings, notify people or file a report.
- Generation takes place in this browser. Your form answers are not sent to a document-generation service or saved between visits. Download before leaving.
- Use only necessary information. Do not enter passwords, full payment credentials or copies of identity documents.
- Send personal or incident details only to the intended recipient through an appropriate channel. Avoid publishing private documents on a public webpage.
Substantive update: 9 October 2026. No certification or review by a named legal professional is claimed.
Frequently asked questions
Is this tool free, and do I need an account?
Generation, formatted copy and exports are free and require no account. Answers are processed in this browser and are not saved between visits. Download your work before leaving.
Is a breach notice to individuals the same as a regulator report?
No. Recipients, thresholds and content differ. Choose the audience and complete the relevant details. Check applicable deadlines separately; do not assume a universal 72-hour deadline for every notice.
Can I keep or edit the example content?
Yes. Fields marked “Editable example” contain model wording you can keep if accurate, edit or restore. Enter actual providers, records, practices and incident facts. The examples are not verified facts or legal certifications.
Which export formats can I use?
Download HTML or an editable Word .docx document. Print / Save PDF opens a print view for a fixed copy. Preview, formatted copy and exports include a link to this exact generator. Sending, publishing or filing is a separate step.
Reference for your review
ICO: personal data breaches and notification. Check the requirements that apply to your location, role and activity; this reference does not establish that a particular law applies to you.