Section 5A(2)

If a personal data breach occurs, the service provider shall, without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify that breach to the Information Commissioner.

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04