Personal data breach
- Art. 33 DSGVO Open in the law texts
- Art. 34 DSGVO Open in the law texts
72-hour clock from awareness, risk assessment (notify the authority? inform data subjects?), Art. 33(3) contents, status from recording to closure and documentation under Art. 33(5).
One entry per personal data breach. From the moment of awareness the 72-hour period for notifying the supervisory authority runs; it appears under Deadlines. Every breach is documented, even when no notification is needed (Art. 33(5) GDPR).