Rule set sha256:adf208a05da8
GDPR_BREACH_NOTIFICATION_001
One rule of the rule set with digest adf208a05da8edfde9ef5c5a1359104382ac794a5b4ec0d0aaca2fd21e90574c. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | GDPR_BREACH_NOTIFICATION_001 |
|---|---|
| Rule version | 9ba85a9dcc9d9ddc778d7ba1a5d74df2396af224b20018cabeae1d7b5194522e |
| Provision | Regulation (EU) 2016/679, Article 33(1) ELI: http://data.europa.eu/eli/reg/2016/679/art_33/par_1/oj |
| Approval | Approved Approved by Leo Celis on 2026-10-16 |
rules/regulations/eu/gdpr_breach_notification.yaml
- Citation
- Regulation (EU) 2016/679, Article 33(1): In the case of a personal data breach, the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority competent in accordance with Article 55, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay.
- Condition
- Requires controllers to notify the supervisory authority of a personal data breach without undue delay and not later than 72 hours after becoming aware, unless the breach is unlikely to result in a risk to rights and freedoms. GDPR Article 33.
- Condition type
- regex, semantic
- Status in the file
- approved