What must an organisation report if personal data leak in Bulgaria?
The personal data commission says a controller must notify it of a personal-data breach without undue delay, and no later than 72 hours after learning of it. The controller must also tell the commission about any later change in the facts of that notice.
Money
Plain answers to everyday money questions, with official links. Not advice.
*Salvo and Vault access require a subscription.