Breach noticesIT Law

Data breach notice to customers and a regulator notice draft (not legal advice)

Delivery from 1 dayRevisions includedQuality check
Packages
Payment protectionDetails
  • Revisions within the package are free.
  • If you do not respond within 3 days of delivery, the work is accepted automatically.
Order · $29

The money is reserved when you pay and released only once you accept the work.

Data breach notice to customers and a regulator notice draft (not legal advice)

Example result

Example for the Standard package

Business letter: payment reminder to a wholesale client

Version A: polite but clear

Subject: Invoices HOC-0412 and HOC-0419: payment now 34 days overdue

Dear Ms. [Surname],

Thank you again for featuring our autumn mugs in your window display. We have heard from several of your customers who found us through your shop, and we value the partnership.

I am writing about two invoices that remain open:

InvoiceDateAmountDue date
HOC-04122 September$1,240.0016 September
HOC-04199 September$865.5023 September
Total$2,105.50

We have not yet received payment for either of them, and our reminder of 1 October went unanswered. If payment has already been sent, please accept our thanks and let me know the date so we can match it.

Could you please settle the total of $2,105.50 by [date, 7 days from sending]? Bank details are at the bottom of both invoices. If a split payment would be easier, reply to this email with a date for each part and we will gladly agree it.

We would like to plan your winter order together, and we can confirm the new collection as soon as the account is up to date.

Kind regards, [Your name] Hollow Oak Ceramics | [phone]

Version B: firm (changed paragraphs)

Subject: Final reminder: $2,105.50 overdue since September

Despite our reminder of 1 October, invoices HOC-0412 and HOC-0419 remain unpaid, now 34 days past their due dates.

Please pay the full $2,105.50 by [date]. Until the account is settled, we are unable to dispatch new orders, including the winter collection reserved for you.

If we do not receive payment or a reply by that date, we will apply the late fee set out in our terms of trade (section 5) and pass the matter to our collections partner.

Notes for you

  • Use Version A first. If there is no reply within 7 days, send Version B.
  • Fill in the bracketed fields and check that the invoice amounts match your records.
  • Only mention the late fee if it really is in the terms the client signed.

Client: Hollow Oak Ceramics, a small pottery studio selling to gift shops Situation: a retail partner has not paid two invoices, now 34 days overdue. The studio wants the money, but also wants to keep the shop as a client. Delivered: one letter in two tones. Version A is below in full; Version B shows the paragraphs that change.

The client and all details are made up.

About this service

After a data incident you usually have little time and two very different readers: customers who need to know what happened and what to do now, and a regulator that expects facts in a set order (under GDPR, within 72 hours of becoming aware). We draft a plain-language customer notice covering what happened, which data was involved, what you have done and the steps people should take, such as resetting passwords or watching for phishing, and a regulator notice draft with the nature of the breach, categories and approximate numbers of people and records, likely consequences and measures taken. It is a draft, not legal advice: your data protection officer or lawyer confirms the obligations in your countries, and you send the notices yourself.

What is included

  • What you getA customer breach notice and, from the Standard package, a regulator notice draft structured by the required points, as text on the order page.
  • Plain customer noticeWhat happened and what to do now
  • Regulator draftFacts in the order authorities expect
  • Honest about unknownsUnconfirmed facts marked, no guesses
  • Protective stepsPasswords, phishing, card monitoring
  • Consistent wordingThe same facts in every notice

How it works

  1. 1
    Incident factsYou describe what happened and who is affected
  2. 2
    DraftingWe write the customer and regulator notices
  3. 3
    Review and sendYour DPO or lawyer checks, you send

What we need from you

What happened and when you found out, which data and roughly how many people are affected, what you have done so far, the countries your customers are in, a contact point for questions and any facts not yet confirmed.

We will ask you:

  • What happened, and when did you become aware of it?
  • Which data was involved, and for roughly how many people?
  • What have you done so far?
  • In which countries are the affected people?

Compare packages

PackagesBasicCustomer notice$15StandardCustomer and regulator$29PremiumFull notice set$55
Deadline1 day2 days3 days
Revisions123
Notices123
Lengthup to 1 pageup to 2 pages eachup to 2 pages each
Includedcustomer noticecustomers, regulatorcustomers, regulator, staff or partners
Order BasicOrder StandardOrder Premium

Payment protection

You pay when you order, but the money is released only for accepted work.

  • Fixed priceThe package price does not change after you pay.
  • The money is reservedWhen you pay, the amount is only reserved. It is released to the service once you accept the work.
  • Checked before deliveryEvery result goes through a quality check before it reaches you, and you see it on the order page before accepting it.
  • Free revisionsAsk for changes within your brief as many times as the package allows.
  • Acceptance after 3 daysIf within 3 days of delivery you neither accept the work nor ask for changes, it is accepted automatically. If you write in the order chat after delivery, the order waits; once we answer, we may start the 3 days again and will say so in the chat.
  • Redo or a full refundIf the result does not match your brief and the revisions did not fix it, or the work takes more than twice its deadline, write in the order chat: we will redo the work or refund the payment in full.
How it works →

Questions and answers

Do we have to notify the regulator?

It depends on the data, the risk to people and your countries. Your DPO or lawyer decides; we prepare the draft so you are ready either way.

Can we send it before the investigation ends?

Often you must. We mark what is still unconfirmed and add a line that you will update people as you learn more.

Do you notify people for us?

No. You send them from your own channels and file the regulator notice through its official form.

Packages
Order · $29· 2 days