Users must be warned of any infringement of their personal data if the case is serious enough to warrant it, and the perpetrator could be prosecuted by the Member State.
Direktīva paredz, ka abonentus, ko skāruši datu drošības pārkāpumi, bez kavēšanās jābrīdina.