{"id":"card:eu:article:gdpr--art-33","applies":["controller: Notify a personal data breach to the supervisory authority.","processor: Notify the controller without undue delay after becoming aware of a breach."],"risk":"high","do":["Notify a personal data breach to the supervisory authority.","Notify the controller without undue delay after becoming aware of a breach."],"deadline":"Not later than 72 hours after becoming aware, where feasible.","authority":["Competent supervisory authority"],"source":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","core_hash":"c54deb5c44e52f5db4cecb741023621fe7ce97d798e9dad647886df3c8179886","next":["obligation:eu:gdpr-art-33-controller","obligation:eu:gdpr-art-33-processor","sanction:eu:gdpr-art-58-2","sanction:eu:gdpr-art-83-4","authority:eu:competent-supervisory-authority"],"next_questions":[{"q":"What does Article 73 AI-ACT require?","card":"card:eu:article:ai-act--art-73"},{"q":"What does Article 69 AMLR require?","card":"card:eu:article:amlr--art-69"},{"q":"What does Article 19a CSRD require?","card":"card:eu:article:csrd--art-19a"},{"q":"What does Article 19 DORA require?","card":"card:eu:article:dora--art-19"},{"q":"What does Article 12 GDPR require?","card":"card:eu:article:gdpr--art-12"}],"attribution":"Source: NovaCopilot","access_class":"decision","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-03T23:14:25.242Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/card?id=card%3Aeu%3Aarticle%3Agdpr--art-33&view=compact","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":396}}