Input schema (JSON)
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"beschreibung",
"entdeckt_am",
"vorfall_typ",
"risiko"
],
"properties": {
"risiko": {
"enum": [
"kein_risiko",
"risiko",
"hohes_risiko",
"unklar"
],
"type": "string",
"description": "Risk to the rights and freedoms of persons as assessed by the organisation; \"unklar\" if not yet assessed"
},
"uebung": {
"type": "boolean",
"default": false,
"description": "true = practice case (drill): no deadline reminders, no notifications"
},
"sprache": {
"enum": [
"de",
"en"
],
"type": "string",
"description": "Output language. Default: German if the input is German, otherwise English."
},
"massnahmen": {
"type": "string",
"maxLength": 4000,
"description": "Measures already taken"
},
"entdeckt_am": {
"type": "string",
"format": "date-time",
"pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$",
"description": "When the organisation became aware of the breach, ISO 8601 with time zone (e.g. 2026-10-28T09:30:00+01:00). Starts the 72-hour deadline. Not in the future."
},
"vorfall_typ": {
"type": "array",
"items": {
"enum": [
"fehlversand",
"verlust_diebstahl",
"cyberangriff",
"schadsoftware",
"phishing",
"unbefugter_zugriff_intern",
"veroeffentlichung",
"fehlkonfiguration",
"entsorgung",
"auftragsverarbeiter",
"sonstiges"
],
"type": "string"
},
"maxItems": 5,
"minItems": 1,
"description": "Type(s) of incident"
},
"beschreibung": {
"type": "string",
"maxLength": 4000,
"minLength": 20,
"description": "What happened, in plain words (20–4,000 characters). Avoid names of affected persons."
},
"bestaetigung": {
"type": "string",
"maxLength": 120,
"description": "Value from the preview. Omit it to get the preview; send it unchanged to create the breach."
},
"anzahl_unbekannt": {
"type": "boolean",
"default": false,
"description": "true if the number of affected persons is not yet known"
},
"betroffene_daten": {
"type": "array",
"items": {
"enum": [
"name",
"email",
"adresse",
"telefon",
"geburtsdatum",
"bankdaten",
"kreditkarte",
"sozialversicherung",
"personalausweis",
"zugangsdaten",
"standort",
"fotos",
"versicherung",
"gesundheit",
"ethnische_herkunft",
"politische_meinung",
"religion",
"gewerkschaft",
"genetisch",
"biometrisch",
"sexualleben",
"straftaten",
"berufsgeheimnis",
"steuer_sozialgeheimnis",
"sonstiges",
"unbekannt"
],
"type": "string"
},
"default": [],
"maxItems": 20,
"description": "Categories of personal data affected"
},
"anzahl_betroffene": {
"type": "integer",
"maximum": 100000000,
"minimum": 1,
"description": "Approximate number of affected persons"
},
"kategorien_personen": {
"type": "array",
"items": {
"enum": [
"beschaeftigte",
"bewerber",
"kunden",
"interessenten",
"nutzer",
"patienten",
"schueler_studierende",
"kinder",
"schutzbeduerftige",
"eltern",
"oeffentliche_personen",
"lieferanten",
"unbekannt",
"sonstige"
],
"type": "string"
},
"default": [],
"maxItems": 14,
"description": "Categories of data subjects"
}
}
}