EUTechRegResearch
MenuClose menu
Digital Omnibus legislative tracker
Texts to 22 Oct 2026

Article 34

Source
CJ72-AM-791874, page 102 pp. 102–105

Amendments as tabled

Five amendments, each tabled separately · ITRE–LIBE amendments 1565–1740 to the draft report

  1. 1671 Deletion Pernando Barrena ArzaThe Left · ITRE–LIBE Deletes the Commission’s wording

    7. in Article 34, paragraph 1 is replaced by the following 1. In the case of a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall without undue delay and, where feasible, not later than 96 hours after having become aware of it, notify the personal data breach to the European Data Protection Supervisor. Where the notification to the European Data Protection Supervisor is not made within 96 hours, it shall be accompanied by reasons for the delay.’

    Tabled by
    Pernando Barrena Arza
    Group
    The Left
    Document
    ITRE–LIBE amendments 1565–1740 to the draft report
    Printed header
    Article 4 – paragraph 1 – point 7 / Regulation (EU) 2018/1725 / Article 34 – paragraph 1
  2. 1672 Alternative Julie Rechagneux +7ECR, PfE · ITRE–LIBE “Controllers shall continue to document non-notified personal data breaches.”

    1. In the case of a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall without undue delay and, where feasible, not later than 96 hours after having become aware of it, notify the personal data breach to the European Data Protection Supervisor. Where the notification to the European Data Protection Supervisor is not made within 96 hours, it shall be accompanied by reasons for the delay. Controllers shall continue to document non-notified personal data breaches.

    Tabled by
    Julie Rechagneux, Mélanie Disdier, Aleksandar Nikolic, Pierre-Romain Thionnet, Alexandre Varaut, Fabrice Leggeri, Marion Maréchal, Christophe Bay
    Group
    ECR, PfE
    Document
    ITRE–LIBE amendments 1565–1740 to the draft report
    Printed header
    Article 4 – paragraph 1 – point 7 / Regulation (EU) 2018/1725 / Article 34 – paragraph 1
  3. 1673 Alternative Elena Sancho Murillo +8S&D · ITRE–LIBE “In the case of a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall…”

    1. In the case of a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall without undue delay and, where feasible, not later than 9672 hours after having become aware of it, notify the personal data breach to the European Data Protection Supervisor. Where the notification to the European Data Protection Supervisor is not made within 9672 hours, it shall be accompanied by reasons for the delay.

    Tabled by
    Elena Sancho Murillo, Marina Kaljurand, Brando Benifei, José Cepeda, Lina Gálvez, Francisco Assis, Alex Agius Saliba, Kristian Vigenin, Matjaž Nemec
    Group
    S&D
    Document
    ITRE–LIBE amendments 1565–1740 to the draft report
    Printed header
    Article 4 – paragraph 1 – point 7 / Regulation (EU) 2016/679 / Article 34 – paragraph 1
  4. 1674 Alternative Irena Joveva +5Renew · ITRE–LIBE “In the case of a personal data breach that is likely to result in a risk to the rights and freedoms of natural persons, the controller shall without…”

    1. In the case of a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall without undue delay and, where feasible, not later than 9672 hours after having become aware of it, notify the personal data breach to the European Data Protection Supervisor. Where the notification to the European Data Protection Supervisor is not made within 9672 hours, it shall be accompanied by reasons for the delay.

    Tabled by
    Irena Joveva, Michael McNamara, Raquel García Hermida-Van Der Walle, Oihane Agirregoitia Martínez, Veronika Cifrová Ostrihoňová, Fabienne Keller
    Group
    Renew
    Document
    ITRE–LIBE amendments 1565–1740 to the draft report
    Printed header
    Article 4 – paragraph 1 – point 7 / Regulation (EU) 2018/1725 / Article 34 – paragraph 1
  5. 1675 Alternative Marina Kaljurand +6S&D · ITRE–LIBE “In the case of a personal data breach that is likely to result in a risk to the rights and freedoms of natural persons, the controller shall without…”

    1. In the case of a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall without undue delay and, where feasible, not later than 9672 hours after having become aware of it, notify the personal data breach to the European Data Protection Supervisor. Where the notification to the European Data Protection Supervisor is not made within 9672 hours, it shall be accompanied by reasons for the delay.

    Tabled by
    Marina Kaljurand, Elena Sancho Murillo, Brando Benifei, Birgit Sippel, Alex Agius Saliba, Francisco Assis, Elisabeth Grossmann
    Group
    S&D
    Document
    ITRE–LIBE amendments 1565–1740 to the draft report
    Printed header
    Article 4 – paragraph 1 – point 7 / Regulation (EU) 2018/1725 / Article 34 – paragraph 1