GDPR-33-03 Reporting 33 — Notification of a personal data breach to the supervisory authority

Processor must notify controller of personal data breach

Description

The processor must notify the controller without undue delay after becoming aware of a personal data breach.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Notify supervisory authority of personal data breach within 72 hours

Provide reasons for delayed breach notification

Describe nature of personal data breach in notification

Provide contact details in breach notification

Describe likely consequences of breach in notification

Describe remedial measures in breach notification

Provide breach information in phases if necessary

Document all personal data breaches

Maintain breach documentation for supervisory authority verification

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started