What is a data breach under the GDPR?

A data breach generally refers to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data. This includes incidents in which personal data is compromised, stolen or accidentally disclosed. In the event of a data breach, the controller is obliged to notify the competent data protection authority and, under certain circumstances, the data subjects. The data breach can result in legal consequences and fines, especially if appropriate security measures have not been taken. Not all "data breaches" pose a risk to the data subjects. Whether a data breach has occurred should be legally examined.