Keeping the Violation Register is a mandatory requirement under the GDPR
Article 33 of EU Regulation 679/2016. Where can the actions to be taken in the event that it is necessary to proceed with a "Notification of a personal data breach to the supervisory authority".
Regulation EU 679/2016
Data Breach Registry ® - DBR, it was developed basing its structure both on what is reported in this specific point of the article and taking into account the indications of the Personal Data Guarantor Authority on how a report should be made.