Duty LXD-7165
Runs an essential service, in San Marino
San Marino Law No. 171, personal data breach notificationsince 4 lines
Legge 21 dicembre 2018 n. 171, articoli 34-35 (violazione dei dati personali) · Read the law's page
- Notify the Data Protection Authority without undue delay, and within 72 hours where feasible, after becoming aware of a personal data breach affecting a person in San Marino, under Article 34.
- Communicate the breach to the affected data subject without undue delay where it is likely to result in a high risk to their rights and freedoms, in clear and plain language.
- As a processor, notify the controller without undue delay after becoming aware of a personal data breach.
- Describe in the notification the nature of the breach, including where possible the categories and approximate number of data subjects and of records concerned, the contact point, the likely consequences and the measures taken, and document every breach, its effects and the remedial action.