Question: Under GDPR, when is an organization considered to be “aware” of a data breach?

A: First off the EU law on personal data protection and privacy covers all individual citizens of the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA areas, so it impacts any organization that gathers or stores EU citizens’ data, regardless of where it is based. 

GDPR guidelines, say…