Revision as of 14:41, 3 January 2013 edit Steeler2 (talk \| contribs) 39 edits No edit summary ← Previous edit		Revision as of 15:01, 3 January 2013 edit undo Steeler2 (talk \| contribs) 39 edits No edit summary Next edit →
Line 23: The data controller has to notify the DPA without undue delay and, where feasible, not later than 24 hours after having become aware of the data breach (Article 31). Individuals have to be notified if adverse impact is determined (Article 32). === Fines === The following fines ~~''shall''~~can be imposed * Up to €250K or up to 0.5% of the annual global sales for intentionally or negligently not responding to requests by the data subject or the DPA, * Up to €500K or up to 1% of annual global sales for intentionally or negligently not complying with GDPR

General Data Protection Regulation: Difference between revisions