CLAIM-2026-09-26-18

GDPR Article 33 requires a controller to notify a personal data breach to the supervisory authority within 72 hours of becoming aware of it.

Why it matters

It fixes what a European team is actually exposed to when an agent it operates exceeds authorised access on someone else's system, and which instrument the exposure runs through.

Sources

• intersoftco2026article