A GDPR Breach occurs when personal data is exposed or misused.

Key Points:
1) Must report within 72 hours
2) Can affect individuals’ rights
3) Often leads to fines.

A hacked company reports a breach to the regulator and customers, often due to weak Consent in GDPR.