Unverified60% confidenceFactTime unknown
GDPR requires organizations to notify regulators within 72 hours of a data breach.
2
Sources
60%
Confidence
Long-term
Relevance
5/31/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedBoth the EU GDPR and China's Personal Information Protection Law require timely notification of regulators and affected individuals after a data breach, along with remedial measures.73% similarUnverifiedU.S. state data breach notification laws (such as California Civil Code Section 1798.82) generally require companies to notify affected residents "promptly" after discovering an incident, but do not set a uniform specific time limit.69% similarUnverifiedData privacy regulations such as GDPR and CCPA, as well as anti-spam regulations such as CAN-SPAM, require companies to be able to demonstrate that explicit user consent was obtained at a specific point in time and to reconstruct communication records.68% similarUnverifiedGDPR第15条赋予数据主体访问权，要求数据控制者在收到请求后一个月内确认是否处理相关个人数据并提供数据副本65% similarVerifiedCustomer usage behavior, payment capability, and business scale data aggregated by billing systems constitute sensitive information requiring strict control under data privacy regulatory frameworks such as GDPR and CCPA.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/11582API
curl https://kongchang.com/api/v1/knowledge/claims/11582MCP
get_claim(id=11582)