The Spanish Data Protection Agency states that in these moments of special vulnerability it is more important than ever to be able to know the incidents that may occur in the protection of personal data.

The AEPD provides that the suspension of deadlines for administrative procedures established in Royal Decree-Law 463/2020 does not affect the obligation to notify security breaches that affect personal data within the first 72 hours.

click on the image to download