{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"Personal Data Breach Notification to Data Subject (Art. 34)","description":"Notification to affected data subjects in clear and plain language when a personal data breach is likely to result in a high risk to their rights and freedoms. Must be made without undue delay.","type":"object","required":["controller","data_subject","breach","data_affected","consequences","recommended_actions"],"additionalProperties":false,"properties":{"reference":{"type":"string"},"notification_date":{"type":"string","format":"date"},"controller":{"type":"object","required":["name","contact_email"],"additionalProperties":false,"properties":{"name":{"type":"string"},"address":{"type":"string"},"contact_email":{"type":"string","format":"email"},"dpo_name":{"type":"string"},"dpo_email":{"type":"string","format":"email"}}},"data_subject":{"type":"object","required":["name"],"additionalProperties":false,"properties":{"name":{"type":"string"},"email":{"type":"string","format":"email"},"reference":{"type":"string"}}},"breach":{"type":"object","required":["description"],"additionalProperties":false,"properties":{"occurred_on":{"type":"string","format":"date"},"discovered_on":{"type":"string","format":"date"},"description":{"type":"string","description":"Plain-language description, no jargon."}}},"data_affected":{"type":"array","minItems":1,"items":{"type":"string"},"description":"What specifically is affected for THIS data subject (not the full breach scope)."},"consequences":{"type":"string"},"measures_taken":{"type":"array","items":{"type":"string"}},"recommended_actions":{"type":"array","minItems":1,"items":{"type":"string"}},"authority_notified":{"type":"object","additionalProperties":false,"properties":{"name":{"type":"string"},"notified_on":{"type":"string","format":"date"}}},"support_contact":{"type":"string"},"status_page_url":{"type":"string"},"signatory":{"type":"object","additionalProperties":false,"properties":{"name":{"type":"string"},"title":{"type":"string"}}}}}