Arts. 33-34 GDPR
Data breach management: the 72 hours without panic
When a breach happens, the problem is not knowing what Art. 33 says - it is doing it in order, on time and leaving a trail, possibly for three clients at once. Recent fines (Wind Tre EUR 1.7M) confirm it: post-incident handling weighs as much as prevention.
How it works in DPO Workspace
Always-visible 72-hour countdown
From the moment of discovery, the Art. 33 timer paces every breach event: no deadlines lost in the panic.
Guided 4-step workflow
Check, actions, decisions, documents - with inline legal references and private DPO notes.
Client reporting via secure link
The client's employee reports the incident via a QR link: you receive it already structured.
The 3 ready templates in the generator
Internal procedure, Art. 34 communication to data subjects and Art. 33(5) breach register - bilingual, exportable to PDF/Word.
Try the full flow, free
30 days, no card. Simulate a breach event and watch the timer start.
Start freeFrequently asked questions
When do the 72 hours for notification start?
From when the controller becomes AWARE of the breach, not from when it occurred. That is why internal reporting channels and fast detection matter: time lost before discovery does not suspend the deadline, but late discovery due to organisational negligence is itself challengeable.
Must every breach be notified?
No: you notify when a risk to individuals is likely; you also communicate to data subjects (Art. 34) when the risk is high. But EVERY breach, even if not notified, must be documented in the Art. 33(5) register with the reasoning behind the decision.
What does the authority ask after a breach?
A timeline of the facts, categories and volumes of data and subjects, the risk assessment, containment and corrective measures, communications made. Recent fines (Wind Tre EUR 1.7M, Intesa EUR 31.8M) show post-incident handling weighs as much as preventive measures.
Breaches are managed before they happen
Procedure, register, communication and timer: all ready, for every client.
Start free