Under the GDPR , the data controller is under a legal obligation to notify the supervisory authority without undue delay .
The breach is unlikely to result in a risk to the rights and freedoms of the individuals .
Under the GDPR , the data controller is under a legal obligation to notify the supervisory authority without undue delay unless the breach is unlikely to result in a risk to the rights and freedoms of the individuals .