Knowledge Breach Notification:[20] From the function of a data breach, the controller must notify the supervisory authority “with no undue hold off” and within 72 hours of finding the breach, wherever possible. Any hold off should be spelled out. In observe, this seventy two-hour deadline may be hard to meet https://gdprcomplianceinusa.blogspot.com/2024/08/data-privacy-compliance-in-saudi-arabia.html