GDPR
Also called: General Data Protection Regulation
The EU General Data Protection Regulation, which governs how personal data is processed and protected. It also applies to companies outside the EU that offer goods or services, paid or free, to people in the EU or monitor their behaviour, so it can reach Taiwan exporters and online services. A personal data breach must generally be reported to the data protection authority within 72 hours of becoming aware of it.
Further reading: commission.europa.eu
From the Security Academy
Responding to a Personal Data Breach: Scoping, Reporting Deadlines and Notifying Individuals
How to scope and contain a personal data breach, which version of Taiwan's PDPA applies, sector reporting deadlines, GDPR, and what to tell affected people.
17 min read ·
Advisories that mention this term
LMU Munich admission system breached, exposing about 600,000 student and alumni records including bank details
LMU Munich notified under GDPR Article 34 on September 19 that an unauthorized actor accessed student registration data stored in an IT system and that it must assume the data were retrieved .