Data-Incident Notification Template review
Data-incident / breach notification template covering GDPR Art. 33 / 34 + HIPAA + US state breach laws.
Review your document — free → See a sample report- 7 document-specific checks
- + 104 general checks
- Nothing uploaded
- Free forever (MIT)
What it checks
Nature of the incident
Incident notification must describe the nature of the personal-data breach.
Critical · PRV-034
Categories and approximate number of data subjects / records affected
Notification must identify categories and approximate numbers of data subjects and personal-data records affected.
Critical · PRV-035
DPO / privacy contact information
Notification must identify the DPO / privacy contact.
Critical · PRV-036
Likely consequences for individuals
Notification must describe the likely consequences of the breach.
Critical · PRV-037
Measures taken / proposed to address the breach
Notification must describe the measures taken / proposed to address the breach and mitigate consequences.
Critical · PRV-038
Timing — 72 hour notification (GDPR Art. 33) + state thresholds
Notification template must address GDPR Art. 33 72-hour timing and applicable state-specific thresholds.
Critical · PRV-039
Regulatory / AG notification trigger threshold
Template must address state-AG / supervisory-authority notification triggers, which vary by state.
Warning · PRV-040
Every run also applies 104 general checks that belong to any agreement: structure, parties and signatures, defined terms, cross-references, dates, amounts, and one-sided terms.
How it works
- Open vaulytica.com — no account, nothing to install.
- Drop your PDF or DOCX. The document type is detected and only the checks that belong to it run, inside your browser tab.
- Get a Word report in which every finding quotes the clause and cites the rule and source behind it — one of 1,825 checks across 268 document types.
More privacy & data protection documents
- Biometric Data Consent (BIPA-style)
- Children's Privacy Notice (COPPA)
- Cookie / Tracking Notice
- Data Sharing Agreement (Research / Inter-Agency)
- DPA — CCPA Service Provider (CPRA-aligned)
- DPA — Controller to Processor (EU/UK)
- DPA — Multi-State US (CCPA, VCDPA, CPA, CTDPA, UCPA, TDPSA, OCPA, DPDPA)
- DPA — Processor to Sub-Processor (EU/UK GDPR)
- Data Protection Impact Assessment (GDPR Art. 35)
- Privacy Notice (GDPR)
- Privacy Notice (US / CCPA)
- Privacy Policy Linter
- Records of Processing Activities (GDPR Art. 30)
- EU Standard Contractual Clauses — Module 2 (Controller to Processor)
- EU Standard Contractual Clauses — Module 3 (Processor to Processor)
- SMS / Telemarketing Consent Disclosure
- UK International Data Transfer Addendum / IDTA
- Vendor Security Addendum
- Vendor Security Questionnaire (SIG / CAIQ)