What’s wrong with WP29 guidelines on personal breach notification under GDPR?
Article 29 Working Party has published guidance on GDPR breach notification requirements to supervisory authorities and data subjects. It builds on WP29’s 2014 ePrivacy Directive breach notification guidance, applicable essentially to telcos (WP213). In practice it may lead to a flood of “just in case” notifications to regulators.
Source: What’s wrong with WP29 guidelines on personal breach notification under GDPR?