A personal data breach is not reported within 72 hours
RSK-014
-
Last updated
Open
Description
As a processor Tidewell IT must tell the customer without undue delay, and the customer has only 72 hours to notify the authority. A breach that sits unnoticed in a ticket queue or over a weekend could make the customer miss its deadline.
Review
On trackNext review is 1/26/2027 — no urgency right now.
- Review cadence
- Every 180 days
- Last reviewed
- Next review due