When must a data breach be reported under GDPR?

Controllers must notify their supervisory authority (e.g. the ICO in the UK) within 72 hours of becoming aware of a personal data breach, unless the breach is unlikely to result in a risk to individuals' rights and freedoms.

When must affected individuals be notified?

Under GDPR Article 34, individuals must be notified 'without undue delay' if the breach is likely to result in a high risk to their rights and freedoms. There is no fixed deadline, but prompt action is required.

GDPR Data Breach Notification Timer

Formula Definitions

The GDPR Data Breach Notification Timer works by applying a well-defined formula to the values you enter. Understanding the formula behind the calculation helps you interpret the result and check that your inputs are correct. Below we break down the key components that drive the GDPR Breach Timer.

The core formula used by this calculator is:

Result = f(principal, rate, time, jurisdiction)

Each variable in the formula has a specific meaning:

principal — Initial amount, income, or base value entered into the GDPR Breach Timer.
rate — Interest rate, tax rate, return rate, or growth rate applied per period.
time — Number of periods (years, months, or days) over which the calculation runs.
jurisdiction — Country, tax year, filing status, or regional rules that adjust the calculation.
Result — Computed amount: total, liability, return, repayment, or present/future value.

Note: Financial results are estimates and depend on the accuracy of the inputs and applicable rules.

How to Use This Calculator

Enter your financial figures. Enter income, principal, interest rate, tax year, or relevant financial parameters into the GDPR Data Breach Notification Timer.
Adjust regional settings. Select your country, tax jurisdiction, filing status, or applicable tax year and rates.
Calculate your result. Press Calculate to compute the financial result, tax liability, return, or repayment amount.
Review the breakdown. Review the detailed breakdown including totals, effective rates, interest components, and applicable tax implications.

Glossary and Definitions

Principal: The initial amount of money on which interest, returns, or tax liabilities are calculated.
Interest rate: The percentage charged or earned per period on the principal, expressed as an annual rate unless stated otherwise.
Compounding: The process by which interest is added to the principal so that subsequent interest is earned on the combined amount.
Present value: The current worth of a future sum, discounted at a given rate to account for the time value of money.
GDPR breach notification: A key concept referenced by the GDPR Breach Timer: Calculate the 72-hour supervisory authority notification deadline under GDPR Article 33. Track elapsed time from breach discovery and identify whether individual notification under Article 34 is required.
72-hour deadline: A key concept referenced by the GDPR Breach Timer: Calculate the 72-hour supervisory authority notification deadline under GDPR Article 33. Track elapsed time from breach discovery and identify whether individual notification under Article 34 is required.
Data breach timer: A key concept referenced by the GDPR Breach Timer: Calculate the 72-hour supervisory authority notification deadline under GDPR Article 33. Track elapsed time from breach discovery and identify whether individual notification under Article 34 is required.
ICO notification: A key concept referenced by the GDPR Breach Timer: Calculate the 72-hour supervisory authority notification deadline under GDPR Article 33. Track elapsed time from breach discovery and identify whether individual notification under Article 34 is required.

Related Calculators

GDPR Fine Estimate

Legal

EU Whistleblower Deadline