# Breach regulatory notification drafter
> Source: https://legalcode.md/skills/legalcode-breach-regulatory-notification-drafter | [HTML version](https://legalcode.md/skills/legalcode-breach-regulatory-notification-drafter)

Draft jurisdiction-specific regulatory notification documents for data protection authorities (DPAs), Attorneys General, and sector regulators following a confirmed data breach.

Draft jurisdiction-specific regulatory notification documents for data protection authorities (DPAs), Attorneys General, and sector regulators following a confirmed data breach. Use when you need to produce a submission-ready regulatory notification: GDPR Art. 33 supervisory authority notification (72-hour timeline), UK ICO breach report, US state Attorney General notification letters (per-state format requirements), Australian OAIC Notifiable Data Breach Statement, Canadian OPC / Quebec CAI breach report, and Brazilian ANPD incident notification. Produces formatted, citation-checked notification documents meeting each regulator's mandatory content requirements — nature of breach, categories and approximate number of data subjects, likely consequences, measures taken and proposed, DPO contact details, and timeline of events. Integrates with legalcode-breach-severity-assessment for upstream harm triage and legalcode-us-breach-notification-triage for US state deadline mapping. Covers EU / UK / US / AU / CA / BR multi-regime incidents with parallel-regulator sequencing, phased notification support, and Glass Box audit trail.

This skill drafts submission-ready regulatory notification documents for personal data breaches across six major jurisdictions. It takes confirmed breach facts (from `legalcode-breach-severity-assessment` or equivalent analysis) and produces formatted notification letters, structured forms, and individual notices that satisfy each regulator's mandatory content requirements. **Covers:** - GDPR Article 33 supervisory authority notification (EU, 72-hour timeline) - UK ICO data breach report (UK GDPR, 72-hour timeline) - US state Attorney General notification letters (per-state format and threshold) - Australian OAIC Notifiable Data Breach (NDB) Statement (Privacy Act Part IIIC) - Canadian OPC breach report (PIPEDA + SOR/2018-64) and Quebec CAI confidentiality incident report (Law 25) - Brazilian ANPD incident notification (LGPD Art. 48 + ANPD Resolution 15/2024) - Individual data subject notice (multi-regime template) - Phased/supplementary notification support for all regimes - Multi-regulator sequencing for parallel notification duties - Document element classification: REQUIRED / RECOMMENDED / OPTIONAL per regulator - Glass Box audit trail for defensible decision documentation - Playbook support for pre-approved organizational language and signature blocks **Does not:** - Determine whether a breach is notifiable (use `legalcode-breach-severity-assessment`) - Triage US state notification obligations and deadlines (use `legalcode-us-breach-notification-triage`) - Perform forensic root-cause analysis or incident containment - Provide legal advice or replace ...

## Jurisdictions

Global



---
*Legalcode -- legalcode.md*