August 2019 figures for BPM Index (with information from 25 EEA Member States) shows continued, consistent disparity among Member States on number of personal data breach notifications per million of population and per million of businesses.
[29 October update to August 2019 figures to include figures for 25 EEA Member States.]
As always, we’re very grateful to the DPAs, who provide us with their monthly figures. This update includes monthly figures for 22 Member States in August 2019 and the GSheet has monthly figures we’ve received from DPAs up to and including August 2019. As always, we welcome input from all Member States.
So, what does the update say? Well, notifications to data protection authorities (‘Notifications’) haven’t been on summer holiday. After 18 months, it looks like the notification rates are pretty steady. The UK, Ireland and Denmark still consistently record larger numbers of notifications, with Ireland and Denmark staying high when you normalise for millions of businesses and population. Some larger countries remain far lower.
Examples from August 2019:
And comparing that with November 2018, and including France for that month:
Please do review the underlying data and join in the conversation!