Article 33 of the GDPR requires notification of a data breach to be made to the relevant supervisory authority within 72 hours of becoming aware of the breach.

Not every breach needs to be reported to the relevant EU privacy commissioner though; if a breach contains non...