This guidance from the U.K. Information Commissioner’s Office outlines breach notification requirements under the EU General Data Protection Regulation, including what information needs to be included in a notification, and when organizations need to notify supervisory authorities and those affected.