Data Breach

Q: What breach notification timelines do contracts require?

GDPR requires 72-hour notification to authorities. Enterprise contracts often require faster notification to the affected customer: 24-48 hours is common for high-security contracts, with detailed root cause analysis within 5-10 business days.

ClauseOps

A data breach is a security incident in which sensitive, protected, or confidential data is accessed, disclosed, or stolen by an unauthorized party. Breaches can result from cyberattacks, insider threats, misconfigurations, or human error. Enterprise contracts define specific breach notification…