Info Breach Notification:[twenty] From the function of a data breach, the controller ought to notify the supervisory authority “without having undue hold off” and within 72 hrs of finding the breach, exactly where possible. Any hold off should be stated. In apply, this 72-hour deadline may be tough to fulfill https://sites.google.com/view/gdpr-compliance-in-usa/data-privacy-compliance-in-saudi-arabia