4.

The communication of a personal data breach to the data subject shall not be required if: Europol has applied to the personal data concerned by that breach appropriate technological protection measures that render the data unintelligible to any person who is not authorised to access it; Europol has taken subsequent measures which ensure that the data subject's rights and freedoms are no longer likely to be severely affected; or such communication would involve disproportionate effort, in particular owing to the number of cases involved. In such a case, there shall instead be a public communication or similar measure informing the data subjects concerned in an equally effective manner.

← art_35__para_3__text_1 · All articles · art_35__para_4__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-01 · Text as adopted (Official Journal); later amendments are not incorporated in this text.