Definition
Article 33 GDPR requires the controller to notify the French supervisory authority (CNIL) of any personal data breach within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to individuals.
Context & regulatory framework
Article 34 also requires data subjects to be informed where there is a high risk. NIS2 provides for reporting at 24 hours / 72 hours / 1 month for cyber incidents.
How we support you
Data Comply One supports you on Breach notification with a complete compliance management platform and the expertise of our teams (DPO, CISO, consultants). The goal: help you reach and maintain compliance, calmly, at your own pace.
Want to know more about Breach notification?
By submitting this form, you agree that your data will be processed by Data Comply One to handle your request. To find out more, see our privacy policy.