Section 68(2)

The information given to the data subject must include the following— a description of the nature of the breach; the name and contact details of the data protection officer or other contact point from whom more information can be obtained; a description of the likely consequences of the personal data breach; a description of the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04