On June 21, 2018, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) published a guide for handling and notifying security breaches (“Guía para la gestión y notificación de brechas de seguridad”). The guide aims to assist organisations in establishing preventive measures, while proposing an action plan in the event of data breaches to their systems.