Jordan Personal Data Protection Law (Law No. 24 of 2023) 20(A)(2): Article 20(A)(2): report to the Unit within 72 hours

For the same breaches, the controller must report to the Unit within 72 hours of discovery the source and mechanism of the breach, the data subjects affected and any other information available. A controller whose gross fault or wrongdoing caused the breach must compensate the data subject (Article 20(B)).