3 ms·

Within 72 hours According to GDPR I thought? “ The GDPR introduces a duty on all organisations to report certain types of personal data breach to the relevant

Within 72 hours According to GDPR I thought? “ The GDPR introduces a duty on all organisations to report certain types of personal data breach to the relevant supervisory authority. You must do this within 72 hours of becoming aware of the breach, where feasible.” https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/personal-data-breaches/ https://ico.org.uk/for-organisations/guide-to-data-protectio...

eterm 7y ago
Maybe NordVPN would argue personal data wasn't breached? It's a bad look in any case.
- hosteur 7y ago
  Theis Keys were stolen. All data is exposed now.
  - dx034 7y ago
    Only if someone used it successfully for MITM attacks. We don't know that, they can still argue that in fact no user data got breached.
dx034 7y ago
I don't think they care about GDPR much. They were set up in a way to avoid legal scrutiny (not a bad idea for a VPN provider).