2.

The notification referred to in paragraph 1 shall, as a minimum: describe the nature of the personal data breach including, where possible and appropriate, the categories and number of data subjects concerned and the categories and number of data records concerned; describe the likely consequences of the personal data breach; describe the measures proposed or taken by Europol to address the personal data breach; and where appropriate, recommend measures to mitigate the possible adverse effects of the personal data breach.

← art_34__para_1__text_1 · All articles · art_34__para_2__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-01 · Text as adopted (Official Journal); later amendments are not incorporated in this text.