A personal data breach involves accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data. Controllers must report such breaches within 72 hours, and if there?s high risk, inform data subjects without delay.
