Tagged
Incident reporting
A software vendor can be fined under GDPR for a breach of its customers' data
Sweden's data protection authority fined Miljödata, an HR software vendor, 1.8 million kronor (about 160,000 euros) und…
9 Oct 2026
GDPR counts an AI agent reading personal data past its permissions as a breach
When an AI agent reaches personal data that it, or the user it acts for, is not authorised to reach, GDPR counts it as…
8 Oct 2026
In a high-risk data breach, GDPR says to tell everyone affected, not only your users
After a breach likely to put people at high risk, GDPR Article 34 requires telling every affected person, including peo…
27 Sep 2026
NIS2 gives you 24 hours to report a full cloud outage longer than 30 minutes
NIS2 gives you 24 hours from becoming aware of a significant incident to file a first report with your national cyber i…
13 Sep 2026
Starting September 11 2026, you have just 24 hours to report on-device vulnerabilities.
The Cyber Resilience Act's reporting duties start on 11 September 2026. The CRA covers software that runs on the user's…
17 Aug 2026
Article 33 asks four things. The EDPB's new breach template asks 100.
The EDPB's draft template for personal data breach notification, which went out for comment until 5 August 2026, turns…
3 Aug 2026