Create intermediate Works with: Any AI

Data Breach Notification Response Letter

Before after Has example

Draft data Breach Notification Response Letter with an escalation ladder and an evidence checklist.

The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.

Write a letter to a company that told me my data was exposed. Inputs I will provide: company [COMPANY_NAME], notice date [NOTICE_DATE], data exposed [DATA_EXPOSED], offer made [OFFER_MADE], my questions [MY_QUESTIONS].

Ask what happened, which of my data was involved, what has been done, and what protection is offered and for how long. Ask whether they reported the incident to the authority. Mention steps I have taken, such as changing passwords, without adding technical claims.

Documents that usually matter: the breach notice with its date, the data they say was exposed, any protection offered such as credit monitoring, and the steps I have already taken such as changing passwords. Realistic outcomes to ask for: clear answers on what happened, which of my data was involved, what protection is offered and for how long, and whether the regulator was told. They will often answer: "The risk to you is low." Answer by asking how they assessed the risk and what evidence they have that the data was not misused.

Their response is pasted as [THEIR_RESPONSE]. For the data breach notification response letter, first tabulate what they said and which statements are facts, which are opinions, and what is missing, then draft my response letter. Supply the letter itself along with a short cover note, around 60 words, plus the ordered next steps if there is no reply (company, then the privacy authority), and an evidence checklist (notice copy, steps log), plus a proof-of-delivery tip. Mail it by certified or registered post with proof of delivery, then file the receipt and a scan of the letter.

Write the letter in the first person as myself, without posing as counsel, and use no made-up titles or licence numbers. Leave all legal citations and cut-off dates to me; use [JURISDICTION] and [RELEVANT_LAW_OR_POLICY_IF_KNOWN], and tell me to verify the exact law with a qualified professional or my local consumer agency. Keep it firm, factual and polite, and no accusations I cannot support, and set any date from [DEADLINE] and no other. Ask for missing facts first and highlight what would fail without evidence. Offer text, not legal advice, so say where a professional should look.

Fill in before use

Optional: type your details and the prompt above updates. Nothing is saved or sent.

Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.

To: Customer Privacy Team, Harbor Fitness Club
Re: Your breach notice dated 4 May
Your notice says my name, email and billing address may have been exposed. I have changed my password and turned on two-step sign-in. Please tell me what exactly of mine was involved, how it happened, when you found out, whether payment card details were affected, and what you are doing to prevent a repeat. I would also like to know whether you have informed the privacy authority and what protection you are offering and for how long. Please reply in writing by 20 May.
Sincerely, Joel Prakash
Cover note: save the original notice and your reply. Verify any rights with your local privacy authority.

• breach