How should businesses handle data breaches under GDPR?
In the event of a data breach, businesses must notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to the rights and freedoms of individuals, affected individuals must also be informed. Proper incident response plans should be in place to handle such scenarios effectively.