Harvey Norman example highlights GDPR breach notification time pressures

The time constraints businesses are under to disclose major personal data breaches under the General Data Protection Regulation (GDPR) has been highlighted by the way an Irish retailer responded to being told some of its customers were impacted by such a breach.

The speed with which Harvey Norman has had to notify the breach to the Irish data protection commissioner and affected customers demonstrates the new requirements of GDPR in action. The 72 hour timeframe means that companies need to be prepared to act quickly once they become aware of a breach.

Source: Harvey Norman example highlights GDPR breach notification time pressures