The controller or processor notifies the Centre through its electronic portal or hotline within 72 hours of becoming aware of a breach or violation and records the notification in a secure electronic log stating the hour and date of awareness and of reporting, the nature of the breach and when it occurred so that the Centre can estimate the number of data affected, the potential effects and expected damage, the immediate and corrective measures taken, the DPO's contact details and any further documents the Centre requests; where national security is concerned the report is immediate and adds the connection to national security and the volume of data and estimated damage; and in all cases the data subject is notified within three working days of the Centre's notification, with the safeguards taken, by the means agreed at consent (text message, email or telephone).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.