Art. 33 Agent

Notification of a personal data breach to the supervisory authority

Decision: Art. 33 GDPR (Notification of a personal data breach to the supervisory authority) applies to controllers and/or processors processing personal data within the scope of Art. 2 and Art. 3.
Obligation: Art. 33 GDPR, Controllers and/or processors. Ordagrann text i EUR-Lex
Risk: high · Art. 83(4): upp till 10 miljoner euro eller 2 % av global årsomsättning
Action: Log every breach
Notify the supervisory authority within 72 hours unless unlikely to result in a risk
Deadline: Without undue delay and, where feasible, not later than 72 hours after having become aware of the breach. (Art. 33(1))
Verification: EUR-Lex, Regulation (EU) 2016/679, läst 2026-10-15 · sha256 5d00e6b440fceb93
Version: Agent 1.0.0 · risk 1.0 · beslut 1.0 · change_score 0