Section 2Security of personal data

1. Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of…

1. In the case of a personal data breach, the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of…

1. When the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall communicate the personal…