Article 34 › 4
GDPR
If the controller has not already communicated the personal data breach to the data subject, the supervisory authority, having considered the likelihood of the personal data breach resulting in a high risk, may require it to do so or may decide that any of the conditions referred to in paragraph 3 are met.
← 3 · All articles · 35 →
Source: EUR-Lex CELLAR · retrieved 2026-08-26