Article 33 - Notification of a personal data breach to the supervisory authority

Article 33 requires data controllers to notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours