Skip to content
cyberGDPR

02 · Art. 33–34 · Area

Breach notification

A personal data breach starts a clock the moment you become aware of it. This area covers the Art. 33 notification to the supervisory authority, the Art. 34 communication to affected people, the internal breach register, and how to wire all of it into your incident-response playbook.

  1. GDPR Breach Notification: Running the 72-Hour Clock

    How security and IR teams handle GDPR Articles 33 and 34: when the 72-hour clock starts, risk assessment, phased notification, and the breach register.