In order to comply with the obligations of data controllers, as provided for in Article 33 of the GDPR, notifications of personal data breaches must be sent to the DPO, by epd(at)uc.pt, with the following minimum information:
a) Describe the nature of the personal data breach, including, where possible, the categories and approximate number of data subjects affected, as well as the categories and approximate number of personal data records concerned;
b) Provide the name and contact details of the data controller or another contact point for further information;
c) Describe the likely consequences of the personal data breach;
d) Describe the measures that may already have been taken or proposed by the data controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.
![]() |
Find out about your rights here. |
![]() |
To submit a complaint and/or claim to DPO-UC, you can use the email address epd(at)uc.pt, putting [Complaint] in the subject line, or use the message form below. Any way, describe the facts accurately and concisely. Attach all information and documentation that may support the complaint and/or claim in order to help DPO analysis. |

