Report of a data protection violation by data subjects

Use this form to report potential violations of data protection regulations if you are a data subject, i.e. your data is directly affected by the processing you are reporting.

You should only use this form if:

• Your data is directly affected by the data processing you are reporting;
• You have already tried to obtain explanations or exercise your rights in respect of the data controller and
• you received no response within one month or
• you believe that the response you have received is incomplete or incorrect, and you have already raised this issue with the data controller but your concerns have not been resolved.

If you have not yet done so, please read the conditions and limitations of an FDPIC intervention:

Important:

Please note that we may need to disclose your personal details to the data controller in order to process your request. If you do not want your data to be disclosed, you can use the form for third parties:

How will the FDPIC handle your report?

• Based on the information provided in your report, we will analyse whether there appears to be a significant violation of data protection regulations, whether intervention by the FDPIC is justified, and if so, what form this should take. If necessary, we may ask you to send us supporting documents or further information.
• Before opening a formal investigation as set out in Article 49 of the Data Protection Act, the FDPIC may contact the data controller to remind them of their obligations and give formal notice that they must comply with the law (a low-threshold intervention) or to ask them to give their response and answer any unresolved questions. This especially applies in simple cases or when clarifications are required.
• As a data subject, you will be informed of the action taken in response to your report and the outcome of any investigation. Further information on investigations can be found here:

Reporting form for data subjects

Please complete the form in full.