Contrary to a broadly shared belief, under the GDPR not all Data Breaches are created equal. Section 33, first paragraph of the GDPR, indeed, clearly says that In the case of a personal data breach, the controller shall … notify the personal data breach to the supervisory authority …, unless the personal data breach is … Continue reading Data Breach Notification is not (always) Mandatory