Section 5A(2)

If a personal data breach occurs, the service provider shall, without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify that breach to the Information Commissioner.

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04 · Text as consolidated on 2026-02-05; changes after this date are not shown.