Many businesses are disclosing minor personal data breaches to the UK's data protection watchdog, wrongly believing that they have to report those incidents under the General Data Protection Regulation (GDPR), the watchdog has said.

https://www.out-law.com/en/articles/2018/september/ico-warns-over-reporting-data-breaches/