A personal data breach is not reported within 72 hours
RSK-014
-
Last updated
Open
Description
As a processor Tidewell IT must tell the customer without undue delay, and the customer has only 72 hours to notify the authority. A breach that sits unnoticed in a ticket queue or over a weekend could make the customer miss its deadline.