---
title: "Acknowledge a breach notification"
method: POST
path: "/api/v1/ojk/breach/acknowledge"
tags: ["OJK Compliance"]
---

# Acknowledge a breach notification

`POST /api/v1/ojk/breach/acknowledge`

## Request

- Base URL: `https://orchestrator.getaxonflow.com`
- URL: `https://orchestrator.getaxonflow.com/api/v1/ojk/breach/acknowledge`
- Auth: none declared
- TypeScript: <https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api/docs/api/v1/ojk/breach/acknowledge/post.ts> (a function with typed inputs; its response is checked against the schema)

Marks a submitted breach notification as acknowledged by the
authority. Only the `submitted -> acknowledged` transition is valid;
acknowledging a draft/overdue/failed/already-acknowledged record
returns 409.

**Enterprise Feature**.

## Headers

- `X-Tenant-ID` string
- `X-Org-ID` string

## Request body

- object
  - `id` string, required: Breach notification id

## Response `200`

Breach notification acknowledged (returns the updated record)

- OJKBreachNotification: UU PDP Art. 46 breach notification. On submission the server assigns id / created_at / submitted_at and computes notification_deadline (discovery_time + 72h) — client-supplied values for those fields are ignored. notified_authority defaults to MOCDA only when the client omits it; a supplied value is honored.
  - `id` string: Server-assigned
  - `incident_timestamp` string, date-time, required
  - `discovery_time` string, date-time, required
  - `notification_deadline` string, date-time: Server-computed (discovery_time + 72h)
  - `data_subjects_affected` integer, required
  - `data_types_involved` string[], required
  - `description` string, required
  - `remediation_steps` string[], required
  - `notified_authority` string: Defaults to MOCDA
  - `status` 'draft' | 'submitted' | 'acknowledged' | 'overdue' | 'failed'
  - `submitted_at` string, date-time
  - `acknowledged_at` string, date-time
  - `created_at` string, date-time

## Other responses

- `400`: Missing tenant headers, malformed body, or missing id
- `404`: Breach notification not found (code `not_found`)
- `409`: Breach cannot be acknowledged from its current status (code `invalid_transition`)
- `500`: Failed to acknowledge breach notification (code `internal_error`)

---

[API](https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api.md) - [All operations](https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api/llms.txt) - [OpenAPI document](https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api/revisions/f408ef3ec9dd?raw)