What is the mandatory time frame for officially reporting a personal data breach to the Commission?
Controllers must notify the Commission and affected subjects within 72 hours upon discovering or reasonably believing a data breach occurred.
Controllers must notify the Commission and affected subjects within 72 hours upon discovering or reasonably believing a data breach occurred.