MUST YOU REPORT A pii BREACH WITHIN 72 HOURS?

Yes, under the General Data Protection Regulation (GDPR), organizations are required to report a personal data breach involving personal identifiable information (PII) to the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to the rights and freedoms of individuals, affected individuals must also be notified without undue delay. Failure to comply can result in significant fines and penalties. Always check local regulations, as requirements may vary.