> For the complete documentation index, see [llms.txt](https://doc.dastra.eu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.dastra.eu/en/features/notifier-les-violations-de-donnees/notifiez-une-violation-de-donnees.md).

# Report a data breach

## Introduction

There are 2 possible ways to fill in a new data breach in DASTRA:

1. Fill in any new breach directly by hand
2. Import breaches from an Excel, csv or text file

### Manual documentation of a data breach

By clicking on the "Add a data breach" button, a window appears where you can detail the data breach. Follow the steps and click on "Save and exit". That's it, you've documented your first data breach manually!

![The steps for documenting the breach](/files/4lCUs3iEPjd181eaMqXK)

{% embed url="<https://youtu.be/59bysJxvs5M>" %}

### Import / export of the data breach register

The entire data breach register can be imported and exported. To import a breach, click on the arrow icon next to the "add a data breach" button.

![](/files/Ycniy6Gt0RdmJiSSJ1Ss)

A window appears with an "import" button. Click on it, download the register template, then follow the instructions to import the breaches into Dastra. Once imported, the breach will be directly available in the data breach register.

![Data breach register import window](/files/bB1RealD8e8EN5P9PJc2)

### How to carry out a risk analysis of the data breach?

{% embed url="<https://youtu.be/r47gMaPJJog>" %}

***

### Linking an AI system to a data breach

When a data breach involves an AI system — whether as the cause, the vector, or because it processes the affected data — you can associate it directly with the breach record.

From the breach editing page, in the **Additional information** section, use the **Linked AI systems** field to search for and associate one or more AI systems declared in your workspace.

<figure><img src="/files/sY7gbm5LWhx8eqabOt0e" alt="AI systems section in the breach record with a dropdown to select the systems"><figcaption><p>"AI systems" section of the breach form — search and select the systems involved</p></figcaption></figure>

This association allows you to:

* Quickly identify the AI systems involved in incidents
* Link the breach to the AI Act compliance documentation of the relevant system
* Centralize incident tracking by AI system in your register
* Filter and display incidents by AI system thanks to the **Linked AI systems** column and its dedicated filter in the data breach register
* Automatically account for linked AI systems in the AI-generated post-mortem report

This association addresses the convergence of the obligations under the GDPR and the European regulation on artificial intelligence (AI Act).

#### "With an AI system" indicator in the incidents register

The data breach register displays a **With an AI system** indicator in the statistics bar at the top of the list. The data breach dashboard also shows an indicator of the number of incidents involving at least one AI system. These counters let you monitor at a glance the share of incidents involving an AI system in your organization.

<figure><img src="/files/lgHkOokeN2P54iIGAcCo" alt="Data breach register with the Linked AI systems column and the dashboard indicator"><figcaption><p>The register's "Linked AI systems" column and the indicator of the number of incidents involving at least one AI system</p></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://doc.dastra.eu/en/features/notifier-les-violations-de-donnees/notifiez-une-violation-de-donnees.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.