Skip to content

Breach Notification

What is Breach Notification?

The legal requirement to inform affected individuals, regulators, or other parties when personal data has been compromised. GDPR requires notification within 72 hours.

Information Security

What the standards actually require on breach notification

Requirements naming breach notification across 6 standards, quoted from the control text.

HITECH Act8 controls

HITECH Subtitle D - Breach Notification + Business Associate (BA) direct liability. BREACH NOTIFICATION RULE (Section 17932; 45 CFR Part 164 Subpart D, Sections 164.400-414): covered entities + BAs must provide notification following discovery of a breach of U...

HITECH-SubtitleD-Breach-Notification-BA-Direct-Liability · HITECH Subtitle D - Breach Notification Rule (45 CFR Part 164 Subpart D), Business Associate Direct Liability, Subcontractors

Ghana DPA 2012 Part Five - Cross-Border + Breach + Enforcement. CROSS-BORDER TRANSFERS (Sec.47): personal data may be transferred outside Ghana only where: (a) ADEQUACY - destination country provides adequate level of protection (DPC determination);

GhDPA-CrossBorder-Breach-Enforcement · Cross-Border Transfers, Breach Notification, Enforcement and Penalties (Part Five)

Georgia DPL cross-border + breach + special-context regimes. CROSS-BORDER TRANSFERS (Art. 35-37 - GDPR Chapter V aligned): personal data may be transferred outside Georgia only where: (a) ADEQUACY - the destination country provides adequate level of protection...

GeDPL-CrossBorder-Breach-Surveillance-Marketing · Cross-Border Transfers, 72-Hour Breach Notification, Video Surveillance and Marketing

16 CFR 314.4(h-j). (h) WRITTEN INCIDENT RESPONSE PLAN: prepare WRITTEN INCIDENT RESPONSE PLAN designed to promptly respond to + recover from any security event materially affecting confidentiality + integrity + availability of customer information;

FTC-Safeguards-IR-Plan-BoardReporting-FTC-Notification · Written Incident Response Plan + Board Reporting + FTC Breach Notification (16 CFR 314.4(h), (i), (j))

Article 9 imposes the DATA-BREACH-NOTIFICATION regime. Controllers must NOTIFY the UAE Data Office of any personal data breach that may pose a risk to the privacy + confidentiality + security of the data subjects WITHOUT UNDUE DELAY (the UAE PDPL does not spec...

UAE-PDPL-Art.9 · Data breach notification (UAE PDPL Article 9)

Questions people ask about breach notification

What is Breach Notification?
The legal requirement to inform affected individuals, regulators, or other parties when personal data has been compromised. GDPR requires notification within 72 hours.
Why is Breach Notification important for compliance?
Breach Notification is a key concept in Information Security. Understanding breach notification helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
What concepts are related to Breach Notification?
Key concepts related to Breach Notification include GDPR (General Data Protection Regulation), Data Breach, Incident Response. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address Breach Notification?
Breach Notification appears in the requirement text of HITECH Act, Ghana Data Protection Act 2012 (Act 843), Georgia Law on Personal Data Protection (2012), Greece Law 4624/2019 - Hellenic Data Protection Authority (HDPA) Implementation Act, FTC GLBA Safeguards Rule (16 CFR Part 314). Across these standards we have identified 28 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Breach Notification?
Explore our compliance framework pages to see how breach notification applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Breach Notification applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.