Data Breach Notification Deadlines by Jurisdiction
Seventy-two hours is the number everyone remembers. The laws differ on what starts the clock, who must be told, and whether an IT provider reports at all.
Compliance and audits
What the rules require: SOC 2, ISO 27001, Cyber Essentials, NIS2 and breach-reporting deadlines.