Article 34 - Communication of a personal data breach to the data subject

Article 34 of the GDPR obliges data controllers to notify the affected data subject when a personal data breach is likely to result in a high risk to their rights and freedoms. The communication must be made without undue delay and include a clear description of the breach, its likely consequences, and the measures taken to mitigate adverse effects. This ensures transparency and enables individuals to protect themselves against potential harm.