If your organization experiences a General Data Protection Regulation (GDPR) breach, you should promptly notify the relevant supervisory authority within 72 hours, inform affected individuals if there is a high risk to their rights and freedoms, and investigate the breach to implement measures to prevent future occurrences. Ensure all actions are documented and comply with regulatory requirements. For more information, visit our risk management guide.