[macintux]

> The notification obligations under the GDPR are only triggered when there is a breach of personal data which is likely to result in a risk to the rights and freedoms of individuals.

https://www.lexology.com/library/detail.aspx?g=03e8a988-7c9e...