GDPR: Dealing With the Mandatory 72-Hour Breach Notification Requirement

Article 33 of the General Data Protection Regulation (GDPR) requires that, in the event of a personal data breach, the data controller – without undue delay and, where feasible, no later than 72 hours after becoming aware of it – notify the appropriate supervisory authority. Organizations appear to be taking this requirement to heart. The […]