Data breach disclosure duties

Abstract

The Regulation (EU) 2016/679, on the protection of natural persons with regard to the processing of personal data, punctually regulates the data breach phenomenon. In the case of a personal data breach, the role of the controller becomes central, because he shall notify the personal data breach to the supervisory authority and communicate the personal data breach to the data subject. Data breach regulations allow us to appreciate the principle of accountability, the centrality of the risk-based approach in data processing and the need to ensure effective protection of the rights and freedoms of data subjects.