https://gdpr-info.eu/art-33-gdpr/
edit: Also California requires notifying the residents directly and if over 500 residents were effected also the attorney general
https://oag.ca.gov/privacy/databreach/reporting
https://gdpr-info.eu/art-33-gdpr/
edit: Also California requires notifying the residents directly and if over 500 residents were effected also the attorney general
https://oag.ca.gov/privacy/databreach/reporting