Notification / complaint to the AEPD (Spanish data protection authority) over a personal data breach (GDPR art. 33)
Notification / complaint to the AEPD (Spanish data protection authority) over a personal data breach (GDPR art. 33) is filed with Sede Electrónica AEPD — Notificación de brechas. With Managora you do it 100% online: you answer a few questions, sign a digital mandato (power of representation) and we draft, sign and file your application for you. Estimated total cost: €29 to €29. Official tasa (government fee): No tasa (official fee).
We draft the notification of a personal data breach to the AEPD (Spanish data protection authority) within the 72-hour deadline (art. 33 GDPR). We check the categories of data affected (special-category data under art. 9, health, financial, children's data, biometric data, login credentials), the number of data subjects, the deadline and the reasons for any delay. We assess whether the data subjects must also be notified (art. 34) and the risk of penalties under art. 83 GDPR (up to 20 M€ or 4% of turnover).
- Estimated total cost
- €29 to €29
- Managora's fee
- €35.09 (21% VAT incl.)
- Tasa (official government fee)
- No tasa (official fee). (suplido: paid to the authority on your behalf, no VAT)
- Processing time
- 72 hours from becoming aware of the breach (art. 33.1 GDPR). If that is exceeded, the delay must be justified. Penalties under art. 83.
- Where it is filed
- Sede Electrónica AEPD — Notificación de brechas ↗
- What you receive
- Papeleta (official claim form) / written submission
Cost breakdown: Our fee 29 euros, with no tasa (official fee) for notifying the data breach to the AEPD..
Notification / complaint to the AEPD (Spanish data protection authority) over a personal data breach (GDPR art. 33): how is it filed?
- 1Answer the questions in the chat (around 7 minutes).
- 2We check the 72-hour deadline and the categories of data affected.
- 3We determine whether the data subjects must also be notified.
- 4Payment of 29 € for the advice and drafting.
- 5We hand you the notification ready for the AEPD online portal.
Which documents do you need?
- •DNI (Spanish national identity document), NIE (foreigner identity number) or CIF (company tax ID).
- •Documentation on the information system affected.
- •Logs / technical evidence.
- •Internal communication from the Data Protection Officer.
- •Template for notifying the data subjects (if applicable).
Legal basis and things to bear in mind
- Legal framework: arts. 33-34 GDPR plus LOPDGDD.
- Deadline to notify the AEPD: 72 hours.
- Notifying the data subjects: where there is a high risk (art. 34).
- Penalties under art. 83 GDPR: up to 20 M€ or 4% of turnover.
- Natural companion procedures: reclamacion_aepd, denuncia_inspeccion_trabajo (if employment data are involved).
Notification / complaint to the AEPD (Spanish data protection authority) over a personal data breach (GDPR art. 33): frequently asked questions
Notification / complaint to the AEPD (Spanish data protection authority) over a personal data breach (GDPR art. 33): how much does it cost?
The estimated total cost (our fee + official tasas and taxes) is €29 to €29: Our fee 29 euros, with no tasa (official fee) for notifying the data breach to the AEPD.. Managora's fee is €35.09, 21% VAT included (€29.00 net + €6.09 VAT). The official tasa charged by the authority (a suplido paid on your behalf, no VAT) is: No tasa (official fee)..
Notification / complaint to the AEPD (Spanish data protection authority) over a personal data breach (GDPR art. 33): how long does it take?
72 hours from becoming aware of the breach (art. 33.1 GDPR). If that is exceeded, the delay must be justified. Penalties under art. 83.
Notification / complaint to the AEPD (Spanish data protection authority) over a personal data breach (GDPR art. 33): which documents do I need?
You need to have to hand: DNI (Spanish national identity document), NIE (foreigner identity number) or CIF (company tax ID)., Documentation on the information system affected., Logs / technical evidence., Internal communication from the Data Protection Officer., Template for notifying the data subjects (if applicable).. You do not upload them here: we collect the details through the guided chat.
Who files the procedure?
Managora files it in your name with Sede Electrónica AEPD — Notificación de brechas. You only provide the details through the chat and sign a mandato (power of representation); we prepare, sign and register it.
Can it be done online?
Yes. The whole process is online: you answer a few questions in the guided chat, sign a simple mandato on screen and receive the receipt and the official documents by email, with full legal validity.
Related procedures
Based on the legislation in force and on the official site of the competent authority: Sede Electrónica AEPD — Notificación de brechas ↗.
Shall we get started with «Notification / complaint to the AEPD (Spanish data protection authority) over a personal data breach (GDPR art. 33)»?
We file it for you, from start to finish.
Start now →