Which of the following best describes the GDPR requirement for data breach notification?
medium🧠 Conceptual Q5 of 15
Cybersecurity - Compliance and Governance
Which of the following best describes the GDPR requirement for data breach notification?
ANotify authorities only if more than 1,000 records are affected
BNo notification is required for data breaches
CNotify authorities after one month of investigation
DNotify authorities within 72 hours of becoming aware of a breach
Step-by-Step Solution
Solution:
Step 1: Recall GDPR breach notification rules
GDPR mandates notifying authorities within 72 hours after learning of a personal data breach.
Step 2: Check options
Only Notify authorities within 72 hours of becoming aware of a breach matches GDPR's strict 72-hour notification rule. Others are incorrect or incomplete.
Final Answer:
Notify authorities within 72 hours of becoming aware of a breach -> Option D
Quick Check:
GDPR breach notification = 72 hours [OK]
Quick Trick:Report breaches within 72 hours [OK]
Common Mistakes:
MISTAKES
Thinking notification depends on breach size
Delaying notification for investigation
Assuming no notification is needed
Master "Compliance and Governance" in Cybersecurity
9 interactive learning modes - each teaches the same concept differently