Section 111(1)

In regulation 5A of the PEC Regulations (personal data breach)— in paragraph (2), after “delay” insert “and, where feasible, not later than 72 hours after having become aware of it”, and after paragraph (3) insert— Where notification under paragraph (2) is not made within 72 hours, it must be accompanied by reasons for the delay.

← 111 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04