thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Data Breach Notification

Legal or contractual obligations to inform regulators, affected individuals or partners after a qualifying data breach.

Definition

Requirements vary by jurisdiction and sector: GDPR requires notifying the supervisory authority within 72 hours of awareness, HIPAA requires notifying individuals without unreasonable delay and within 60 days, and the SEC requires public companies to disclose material incidents within four business days of determining materiality. Legal counsel guides notification decisions.

Example

Notifying a data protection authority within 72 hours after confirming customer data exfiltration.

Exam tip

Know GDPR 72 hours and SEC 8-K Item 1.05 four business days after materiality determination.

Related terms