Article 5Communication of personal data breaches to data subjects#
Where the Commission is under an obligation to communicate a personal data breach to the data subject, as referred to in Article 35 of Regulation (EU) 2018/1725, it may, in exceptional circumstances, restrict such communication wholly or partly. It shall record and register the reasons for the restriction in accordance with Article 6 of this Decision. The Commission shall communicate the record to the European Data Protection Supervisor at the time of the notification of the personal data breach.
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.