[agos]

no, but it does mandate to notify the people affected by the error/breach/fudge up. I wonder if they would have notified anyone if it wasn't for GDPR.