GDPR Compliance: Notification Of Data Breaches – Cyber Attacks

As a business owner in Cyprus and in light of the recent cyber-attacks to the University of Cyprus and the Land Registry Department, it is important to understand your responsibilities when it comes to data protection and the notification of data breaches or hacking incidents. The General Data Protection Regulation (GDPR) sets out strict obligations and guidelines for companies to follow in the event of a data breach.

In the event of a serious data breach or hacking incident, the first step is to notify the relevant authorities. According to the GDPR you should inform the Office of the Commissioner for Personal Data Protection without undue delay and, where feasible, not later than 72 hours after having become aware of it. You should also report the incident to the Cyprus Police Cybercrime Subdivision the Office for Combating Cybercrime which is responsible amongst others for the investigation of crimes committed via the internet or via computers.