ZFODO's position on how to calculate the 72h deadline for reporting an incident to the regulator

5 February 2020

How should we expect 72 hours to report an incident?
Is this about getting the first information about the incident?
Do they start running for 72 hours only when, for example, the Data Protection Inspector finds an incident.

What does it mean to "state" an incident?
The key topic from the perspective of each person who, acting under time pressure, wondered if he would manage to report the incident within the Regulation deadline.

Please be advised that in order to optimize the content available on our website, tailoring it to your individual needs, we use information saved using cookies on users' terminal equipment. Users can control cookies using the settings of their web browser. Further use of our website, without changing your web browser settings means that the user accepts the use of cookies.