Monitoring compliance with the GDPR Under the GDPR, we’re required to report certain types of data breaches to the relevant regulator, such as the Information Commissioner’s Office in the UK, and the affected individuals.