{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/recitals/88","url":"https://www.headlesslaw.com/gdpr/recitals/88","title":"Recital 88","family":"l1_recital_view","work_id":"gdpr","view_of":"/gdpr/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Regulation (EU) 2016/679, OJ L 119, 4.5.2016","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679","valid_from":"2016-05-04","valid_until":null,"content_id":"92e49db71e0af410","versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/recitals/88/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/recitals/88/versions/2016-05-04/rev/92e49db71e0af410","versions_url":"https://www.headlesslaw.com/gdpr/recitals/88/versions","relations_url":"https://www.headlesslaw.com/gdpr/recitals/88/relations","act_url":"https://www.headlesslaw.com/gdpr/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"gdpr","path":"/gdpr/recitals","name":"GDPR","number":"Regulation (EU) 2016/679","celex":"32016R0679","title_official":null,"document_date":null},"position":{"kind":"recital","key":"88","index":88,"articles":173,"annexes":0},"prev":{"path":"/gdpr/recitals/87","key":"87","title":"Recital 87"},"next":{"path":"/gdpr/recitals/89","key":"89","title":"Recital 89"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/gdpr/recitals.md","unit_text_sha256":"63837afc553c6bcdf2dd9d51f446f5c0d7e13a649cfc13852e692f2eddaad2e9","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"gdpr/recitals/rec/88","kind":"recital","key":"88","heading":"","text":"In setting detailed rules concerning the format and procedures applicable to the notification of personal data breaches, due consideration should be given to the circumstances of that breach, including whether or not personal data had been protected by appropriate technical protection measures, effectively limiting the likelihood of identity fraud or other forms of misuse. Moreover, such rules and procedures should take into account the legitimate interests of law-enforcement authorities where early disclosure could unnecessarily hamper the investigation of the circumstances of a personal data breach.","marks":[],"text_hash":"63837afc553c6bcdf2dd9d51f446f5c0d7e13a649cfc13852e692f2eddaad2e9","revision":1,"blocks":[{"locator":"gdpr/recitals/rec/88/block/1","text_hash":"63837afc553c6bcdf2dd9d51f446f5c0d7e13a649cfc13852e692f2eddaad2e9","revision":1}]}}