Where a breach is likely to create high risk, affected Data Subjects must be informed without undue delay in clear language, unless effective protection, later risk removal or disproportionate effort justifies an alternative.
Interpretation and application must be checked against the official text and current version.