ANNEX IISupplementary provisions
ANNEX II Content of the notification to the subscriber or individual 1. Name of the provider 2. Identity and contact details of the data protection officer or other contact point where more information can be obtained 3. Summary of the incident that caused the personal data breach 4. Estimated date of the incident 5. Nature and content of the personal data concerned as referred to in Article 3(2) 6. Likely consequences of the personal data breach for the subscriber or individual concerned as referred to in Article 3(2) 7. Circumstances of the personal data breach as referred to in Article 3(2) 8. Measures taken by the provider to address the personal data breach 9. Measures recommended by the provider to mitigate possible adverse effects