> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.laposta.org/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.laposta.org/_mcp/server.

# When and where must you report data breaches?

> Rules for reporting a data breach to the Data Protection Authority and the agreements with Laposta.

A data breach occurs when there is destruction, loss, alteration, or unauthorised disclosure of or access to personal data. A data breach must always be reported, unless there is little to no risk to the privacy of the data subjects.

## Reporting a data breach

You must report the breach as soon as possible to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP), and no later than within 72 hours of discovery. You can do this via the [AP data breach reporting portal](https://datalekken.autoriteitpersoonsgegevens.nl/). If there is a high risk to privacy, you must also report the data breach to the data subject.

> **Warning**
>
> If you fail to report a data breach or report it too late, the AP may impose [fines](/boetes).

## What does Laposta do in the event of a data breach?

The [data processing agreement](/wat-is-een-verwerkersovereenkomst) states that Laposta, as the processor, will inform you of a potential data breach within 24 hours. You then have 48 hours left to submit the report to the AP.

On the page [Complying with the GDPR](/hoe-zorg-ik-ervoor-dat-ik-voldoe-aan-de-avg), you can read what else you need to take into account.

## Related articles

#### [What agreements are included in a data processing agreement?](/wat-is-een-verwerkersovereenkomst)

What agreements you make about processing personal data and how Laposta handles your data.

#### [What does the GDPR mean for your newsletter?](/privacywetgeving)

Which rules apply to collecting email addresses and how Laposta protects your data.

#### [Where can you find Laposta's privacy statement?](/privacystatement)

How Laposta processes and secures personal data, and where you can report a security…

#### [When does automatic termination occur due to inactivity?](/automatische-beeindiging-door-laposta)

If you do not use a free account for 600 days, Laposta will first send two warning…