Most global privacy laws require organizations to report personal data breaches to regulatory authorities and impacted data subjects. However, the threshold at which an organization is required to fulfill such notification requirements differs depending on the entity to be notified and the respective data protection law.

Let’s look into breach notification requirements of GDPR, CCPA, and LGPD: