Clifford Chance
Guidelines on personal data breach notification - stress test on risk governance
13 March 2018
The General Data Protection Regulation (the GDPR) provides for mandatory breach notification and communication requirements. The GDPR will apply from 25 May 2018. Non-compliance may expose organisations to penalties ranging up to EUR 10 million or 2% of global turnover, claims for damages and may affect reputation. The revised guidelines on Personal data breach notification1 set actions to comply with the GDPR.
