{"id":24322,"date":"2019-09-02T22:00:00","date_gmt":"2019-09-02T20:00:00","guid":{"rendered":"https:\/\/www.delucapartners.it\/news\/the-form-for-notifying-the-data-breach-is-ready\/"},"modified":"2026-02-16T16:15:14","modified_gmt":"2026-02-16T15:15:14","slug":"the-form-for-notifying-the-data-breach-is-ready","status":"publish","type":"post","link":"https:\/\/www.delucapartners.it\/en\/insights\/the-form-for-notifying-the-data-breach-is-ready\/","title":{"rendered":"The form for notifying the Data Breach is ready"},"content":{"rendered":"\nWith Regulation 157 of 30 July 2019, which fully replaces all previous measures on the subject, the Guarantor for the Protection of Personal Data has provided the form for reporting computer incidents.\n\nData Breach<\/strong>\n\nPursuant to Article 33, paragraph 1, of the EU Regulation 2016\/679 on the protection of personal data (the “GDPR<\/em><\/strong>“), the Data Controller is obliged, without undue delay and, where possible, within 72 hours of becoming aware of it<\/strong>, to notify the breach<\/strong> to the Supervisory Authority unless the breach of personal data is unlikely to pose a risk to the rights and freedom of individuals. In addition, the Data Controller who becomes aware of a possible violation is obliged to inform the owner in a timely manner so that he can take action.\n\nNotifications to the Guarantor made after the 72-hour period must be accompanied by the reasons for the delay.\n\nFurthermore, if the breach involves a high risk to the rights of the individuals, the holder must communicate it to all the persons concerned<\/strong>, using the most appropriate channels, unless he has already taken measures to reduce its impact.\n\nThe Data Controller, regardless of the notification to the Guarantor, documents all breaches of personal data, for example by preparing a special register. This documentation allows the Control Authority to carry out any audits on the compliance with the regulations.\n\nContent of the notification to the Guarantor<\/strong>\n\nPursuant to Article 33, paragraph 3, of the GDPR, the notification to the Guarantor must include the following information:\n