Therefore, as soon as the controller becomes aware that a personal data breach has occurred, the controller should notify that personal data breach to the European Data Protection Supervisor without undue delay and, where feasible, not later than 72 hours after having become aware of it, unless the controller is able to demonstrate, in accordance with the accountability principle, that the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.
Dá bhrí sin, a luaithe a bheidh an rialaitheoir ar an eolas faoi shárú a bheith déanta i ndáil le sonraí pearsanta, ba cheart don rialaitheoir fógra faoin sárú i ndáil le sonraí pearsanta a thabhairt don Mhaoirseoir Eorpach ar Chosaint Sonraí, gan aon mhoill mhíchuí agus, i gcás inar féidir, tráth nach déanaí ná 72 uair an chloig tar éis dó eolas a fháil ina leith, maidir leis an sárú i ndáil le sonraí pearsanta, ach amháin i gcás ina mbeidh an rialaitheoir in ann a thaispeáint, i gcomhréir le prionsabal na cuntasachta, nach dócha go mbeidh riosca ag gabháil leis an sárú i ndáil le sonraí pearsanta do chearta agus do shaoirsí daoine nádúrtha.