Not everything has to be a pissing match and in any case under these rules the company must report the incident to "the supervisory authority" within 48 hours.

Not everything has to be a pissing match and in any case under these rules the company must report the incident to "the supervisory authority" within 48 hours. The 96 is the public disclosure.