The EDPB data breach notification template is a genuine step forward for GDPR compliance, yet it raises five open questions — from forensic-level detail to cross-border coordination — that controllers should debate before the public consultation closes on 5 August 2026.