{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/recitals/87","url":"https://www.headlesslaw.com/gdpr/recitals/87","title":"Recital 87","family":"l1_recital_view","work_id":"gdpr","view_of":"/gdpr/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Regulation (EU) 2016/679, OJ L 119, 4.5.2016","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679","valid_from":"2016-05-04","valid_until":null,"content_id":"109a6c48a644c5dc","versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/recitals/87/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/recitals/87/versions/2016-05-04/rev/109a6c48a644c5dc","versions_url":"https://www.headlesslaw.com/gdpr/recitals/87/versions","relations_url":"https://www.headlesslaw.com/gdpr/recitals/87/relations","act_url":"https://www.headlesslaw.com/gdpr/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"gdpr","path":"/gdpr/recitals","name":"GDPR","number":"Regulation (EU) 2016/679","celex":"32016R0679","title_official":null,"document_date":null},"position":{"kind":"recital","key":"87","index":87,"articles":173,"annexes":0},"prev":{"path":"/gdpr/recitals/86","key":"86","title":"Recital 86"},"next":{"path":"/gdpr/recitals/88","key":"88","title":"Recital 88"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/gdpr/recitals.md","unit_text_sha256":"8a2a1a94e26e0fce16c450e9e7deb6b3dc458e53ed207c191b665fd1deecf094","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"gdpr/recitals/rec/87","kind":"recital","key":"87","heading":"","text":"It should be ascertained whether all appropriate technological protection and organisational measures have been implemented to establish immediately whether a personal data breach has taken place and to inform promptly the supervisory authority and the data subject. The fact that the notification was made without undue delay should be established taking into account in particular the nature and gravity of the personal data breach and its consequences and adverse effects for the data subject. Such notification may result in an intervention of the supervisory authority in accordance with its tasks and powers laid down in this Regulation.","marks":[],"text_hash":"8a2a1a94e26e0fce16c450e9e7deb6b3dc458e53ed207c191b665fd1deecf094","revision":1,"blocks":[{"locator":"gdpr/recitals/rec/87/block/1","text_hash":"8a2a1a94e26e0fce16c450e9e7deb6b3dc458e53ed207c191b665fd1deecf094","revision":1}]}}