By reading the GDPR I have gathered that a data processor is obligated to notify the data controller of a breach within 72 hours and the data controller is likewise obligated to notify the supervisory authority within 72 hours.

What should a data processor do (if anything) if it has notified the data controller of a breach and it is aware of the data controller's negligence to notify the supervisory authority? Are there circumstances where a data processor should notify the supervisory authority?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.