Personal Data Breach Notification

Personal Data Breach Notification

Under the General Data Protection Regulation (GDPR), controllers mustnotify:

the competent authority of any personal data breach likely to result in a risk to the right and freedoms of the data subjects;

the individuals concerned of any personal data breach likely to result in a high risk to their rights and freedoms.

It is therefore important for a controller to understand what a personal data breach is and to be ready to react promptly and appropriately when it happens.