Notification of a personal data breach to the supervisory authority

Personal data breaches must be reported to the supervisory authority within 72 hours of awareness, unless the breach is unlikely to result in a risk to rights and freedoms.

Article

Art. 33

Chapter

Chapter IV — Controller and processor