Section 111(3)

In Article 2 of Commission Regulation (EU) No 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications (notification to the Commissioner)— in paragraph 2— in the first subparagraph, for the words from “no” to “feasible” substitute “without undue delay and, where feasible, not later than 72 hours after having become aware of it”, in the second subparagraph, after “shall” insert “, subject to paragraph 3,”, and after the third subparagraph insert— This paragraph is to be interpreted in accordance with Article 3 of Regulation (EEC, Euratom) No. 1182/71 of the Council of 3 June 1971 determining the rules applicable to periods, dates and time limits. for paragraph 3 substitute— To the extent that the information set out in Annex 1 is not available to be included in the notification, it may be provided in phases without undue further delay.

← 2 · All articles · 112 →

Source: legislation.gov.uk · retrieved 2026-09-04