Breach Notification
What is Breach Notification?
The legal requirement to inform affected individuals, regulators, or other parties when personal data has been compromised. GDPR requires notification within 72 hours.
Related terms
Frameworks that govern breach notification
What the standards actually require on breach notification
Requirements naming breach notification across 6 standards, quoted from the control text.
Ghana DPA 2012 Part Five - Cross-Border + Breach + Enforcement. CROSS-BORDER TRANSFERS (Sec.47): personal data may be transferred outside Ghana only where: (a) ADEQUACY - destination country provides adequate level of protection (DPC determination);
GhDPA-CrossBorder-Breach-Enforcement · Cross-Border Transfers, Breach Notification, Enforcement and Penalties (Part Five) →Georgia DPL cross-border + breach + special-context regimes. CROSS-BORDER TRANSFERS (Art. 35-37 - GDPR Chapter V aligned): personal data may be transferred outside Georgia only where: (a) ADEQUACY - the destination country provides adequate level of protection...
GeDPL-CrossBorder-Breach-Surveillance-Marketing · Cross-Border Transfers, 72-Hour Breach Notification, Video Surveillance and Marketing →The controller must notify the Commissioner of a personal data breach under Article 29. Where the breach may present a significant risk to rights and freedoms it must communicate it to the data subject immediately in clear and plain language with at least the...
albania-law-no-124-2024-on-personal-data-protection::67 · Article 67: breach notification in law enforcement →A controller or processor notifies the Centre of any personal data infringement within 72 hours, or immediately where national security is concerned, so that the Centre can give the national security authorities within 72 hours a description of the nature, for...
egypt-personal-data-protection-law-law-no-151-of-2020::Art.7 · Art.7 Breach notification: the Centre within 72 hours and the data subject within three working days →Schedule 1 DPP4 Data Security Principle requires all practicable steps shall be taken to ensure that personal data held by a data user is protected against unauthorised or accidental access, processing, erasure, loss or use.
HK-PDPO-DPP4-Security-Processor-Oversight-Breach-Handling · HK PDPO DPP4 Data Security Principle + Processor Oversight + Voluntary Breach Notification (pending mandatory regime) →Articles 39 + 46 of UU PDP establish security + breach notification obligations. Article 39: Personal Data Controller shall protect personal data processed through implementation of appropriate technical + organisational + and physical security measures + comm...
IDPdp-Security-BreachNotification-72Hour-Art39-Art46-Encryption-Pseudonymisation-Records-IR · Indonesia PDP Article 39 + Article 46 + Reasonable Security + Encryption + Pseudonymisation + Personal Data Breach Notification 3x24 Hours (72 Hours) to DPA + Data Subjects + IR Plan + Records →Questions people ask about breach notification
What is Breach Notification?
Why is Breach Notification important for compliance?
What concepts are related to Breach Notification?
Which compliance frameworks address Breach Notification?
Where can I learn more about Breach Notification?
See how Breach Notification applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.