CISSP: Certified Information Systems Security Professional

GDPR Article 33 requires notification of a qualifying personal data breach to the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it.