The information provided to the ANPD must be clear and concise.

It is recommended that the communication contain the identification and contact details of the entity or person responsible for processing, the relevant data supervisor or other contact person.

The notice should indicate whether the information provided is complete or partial (if partial, it should state whether it is preliminary or complementary in nature).

The notice should also provide significant detail regarding the incident, including detection details, time and duration, surrounding circumstances, the nature of personal data affected, the possible consequences, and any remedial measures implemented to date (more details of notice requirements can be provided on request).

The ANPD may request additional information at any time.