--- title: "GDPR: How to ensure the obligation to report an incident within 72 hours? — ZEBR.ai" description: "The new regulation increases requirements for security monitoring and incident documentation" url: "https://zebr.ai/en/blog/gdpr-how-to-ensure-the-obligation-to-report-an-incident-within-72-hours" markdown_url: "https://zebr.ai/en/blog/gdpr-how-to-ensure-the-obligation-to-report-an-incident-within-72-hours.md" language: "en" published: "2018-02-06T09:06:55+00:00" alternates: cs: "https://zebr.ai/cs/blog/gdpr-jak-zajistit-povinnost-ohlaseni-incidentu-do-72-hodin.md" sl: "https://zebr.ai/sl/blog/gdpr-kako-zagotoviti-obveznost-prijave-incidenta-v-72-urah.md" sk: "https://zebr.ai/sk/blog/gdpr-ako-zabezpecit-povinnost-nahlasenia-incidentu-do-72-hodin.md" hr: "https://zebr.ai/hr/blog/gdpr-kako-osigurati-obvezu-prijave-incidenta-u-roku-od-72-sata.md" sr-Latn: "https://zebr.ai/sr-latn/blog/gdpr-kako-obezbediti-obavezu-prijave-incidenta-u-roku-od-72-sata.md" bs: "https://zebr.ai/bs/blog/gdpr-kako-osigurati-obavezu-prijave-incidenta-u-roku-od-72-sata.md" sq: "https://zebr.ai/sq/blog/gdpr-si-te-sigurohet-detyrimi-per-raportimin-e-incidentit-brenda-72-oreve.md" fr: "https://zebr.ai/fr/blog/rgpd-comment-respecter-l-obligation-de-notification-d-un-incident-dans-les-72-heures.md" es: "https://zebr.ai/es/blog/rgpd-como-garantizar-la-obligacion-de-notificar-un-incidente-en-un-plazo-de-72-horas.md" de: "https://zebr.ai/de/blog/dsgvo-wie-laesst-sich-die-pflicht-zur-meldung-eines-vorfalls-innerhalb-von-72-stunden-erfuellen.md" pt-BR: "https://zebr.ai/pt-br/blog/gdpr-como-garantir-a-obrigacao-de-notificar-um-incidente-em-ate-72-horas.md" pl: "https://zebr.ai/pl/blog/gdpr-jak-zapewnic-obowiazek-zgloszenia-incydentu-w-ciagu-72-godzin.md" it: "https://zebr.ai/it/blog/gdpr-come-garantire-l-obbligo-di-notifica-degli-incidenti-entro-72-ore.md" nl: "https://zebr.ai/nl/blog/gdpr-hoe-voldoet-u-aan-de-meldplicht-voor-incidenten-binnen-72-uur.md" hu: "https://zebr.ai/hu/blog/gdpr-hogyan-teljesitheto-az-incidens-72-oran-beluli-bejelentesenek-kotelezettsege.md" ro: "https://zebr.ai/ro/blog/gdpr-cum-se-asigura-obligatia-de-notificare-a-unui-incident-in-termen-de-72-de-ore.md" tr: "https://zebr.ai/tr/blog/gdpr-72-saat-icinde-olay-bildirim-yukumlulugu-nasil-saglanir.md" id: "https://zebr.ai/id/blog/gdpr-bagaimana-memastikan-kewajiban-pelaporan-insiden-dalam-72-jam.md" --- [Home](https://zebr.ai/en/) [Blog](https://zebr.ai/en/blog) GDPR: How to ensure the obligation to report an incident within 72 hours? # GDPR: How to ensure the obligation to report an incident within 72 hours? [compliance](https://zebr.ai/en/blog?tag=compliance) [GDPR](https://zebr.ai/en/blog?tag=gdpr) [GFI Software](https://zebr.ai/en/blog?tag=gfi-software) [press release](https://zebr.ai/en/blog?tag=press-releases) [reporting and logs](https://zebr.ai/en/blog?tag=reporting-and-logs) The new regulation increases requirements for security monitoring and incident documentation 06/02/2018 · 3 min read · ZEBR.ai editorial team *The new regulation increases requirements for security monitoring and incident documentation* **PRAGUE, 6 February 2018** – [**GFI Software**](http://www.gfi-software.cz/)**,** a provider of security solutions for enterprise networks, points out that stricter requirements arising from GDPR include the obligation to notify the relevant supervisory authorities of personal data security breaches and to keep records of processing activities. This increases demands on the IT infrastructure of businesses and organizations in the area of **security monitoring and incident documentation**. In addition to the resulting need to report a breach within 72 hours of its initial discovery, the GDPR requires controllers and processors to maintain detailed documentation (an audit trail) of the incident, retention periods for the deletion of various categories of data, and descriptions of the technical and organizational security measures implemented. Although there is a limited exemption for organizations employing fewer than 250 people, additional criteria must be met to qualify for it, and many organizations will not be eligible. “While preventing and minimizing damage from personal data breaches is the highest priority, documentation is also essential when it comes to GDPR compliance; customers must not only be able to respond, but also to later demonstrate precisely when and how they responded,” said **Zdeněk Bínek, responsible for sales of GFI Software solutions in the Czech Republic and Slovakia**. “Although many organizations believe that their current security infrastructure covers GDPR requirements, in reality it does not address some of the new obligations, including incident reporting and documentation. This corresponds with our current findings, according to which fewer than one fifth of Czech and Slovak businesses are fully prepared for GDPR. A number of solutions are available on the market. The Windows Server operating system provides logs of security events, but without a dedicated solution capable of easily identifying suspicious activity in real time for the fastest possible response, searching through the logs can be difficult. Microsoft Azure Security Center can help with security event monitoring and setting up alerts to detect threats in the cloud. The most effective overview of security – including policies, mechanisms, activities and applications – is provided by specialized solutions, such as the event management software [**GFI EventsManager**](https://gfi-software.cz/gfi-eventsmanager/), which enables faster incident response. It provides three-tier data consolidation from logs, prepared for reporting to supervisory authorities in accordance with GDPR and additionally protected by two-factor authentication. This information can be helpful as early as the stage of assessing the impact of implemented personal data protection measures (DPIA). Customers of the solution in the local market include **Panasonic Industrial Devices Slovakia**, for which GFI EventsManager provided an easy-to-use and effective tool, among other things, for meeting legal requirements. Article author: ZEBR.ai editorial team Read on ## More related articles [All articles](https://zebr.ai/en/blog) Contact ## Do you need a solution for yourself or for your client? Tell us which service you are looking into, and a specialist in that area will get back to you directly. [(704) 745-4214](tel:+17047454214)\ --- - Source: - Site overview for AI agents: