About

About breach72

A free, open calculator that turns one timestamp into your GDPR Article 33 notification deadline.

When a personal data breach happens, the GDPR gives controllers 72 hours from becoming aware of it to notify the supervisory authority. The clock, though, has subtleties: it starts at "awareness" (not at occurrence), it runs in continuous calendar hours, and where it ends on a non-working day it may be extended under an old EU time-limits regulation. Most online pages explain this in prose; breach72 computes it for your moment of awareness.

breach72 turns one input — the moment you became aware of a personal data breach, in a chosen timezone — into the GDPR Article 33 picture: the strict 72-hour deadline to notify the supervisory authority with a live countdown, whether that point falls on a non-working day and how Regulation 1182/71 may extend it, and a reminder of the separate Article 34 duty to tell affected individuals when the risk is high. It applies the regulation text and EDPB guidance with a disclosed method — no black box — and runs entirely in your browser. It is informational only, not legal advice, and not affiliated with any supervisory authority.

It shows the strict 72-hour deadline with a live countdown, flags when that point lands on a weekend or public holiday and the Regulation 1182/71 extension to the next working day, and reminds you of the separate Article 34 duty to communicate with affected individuals when the risk is high. Because it is a static page, the timestamp you enter stays in your browser.

Informational only — not legal advice, and not affiliated with any supervisory authority or the European Union. During a real breach, involve your Data Protection Officer and qualified counsel. Open the calculator →