The GDPR incorporates a standard prerequisite for a personal data breach to become notified through the controller to its supervisory authority, and for more critical breaches to even be notified to impacted data subjects. A "individual data breach" is a wide principle, defined as any ") and (iii) recorded by data controllers, for an correct period