# Communication of a personal data breach to the data subject 34(a) — GDPR — provision context

> Focused context for a single provision (34(a)), curated from overview.legal on 2026-10-06. Canonical: https://overview.legal/laws/gdpr/art-34#par-3-pnt-a
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Communication of a personal data breach to the data subject** (GDPR, full article: https://overview.legal/laws/gdpr/art-34).

## Provision text

### 34(a)

the controller has implemented appropriate technical and organisational protection measures, and those measures were applied to the personal data affected by the personal data breach, in particular those that render the personal data unintelligible to any person who is not authorised to access it, such as encryption;


## Topics on this provision

- **Data Breaches** — https://overview.legal/topics/datalekken
  Security incidents involving unauthorized access to personal data
- **Notification Obligation** — https://overview.legal/topics/meldplicht
  Duty to report data breaches to authorities and affected individuals
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons
- **Security** — https://overview.legal/topics/beveiliging
  Technical and organizational measures to protect personal data
- **Encryption** — https://overview.legal/topics/encryption
  Encryption and cryptographic measures

## Cited by (exact-provision citations)

- **Midlands Regional Hospital Tullamore, County Offaly: Insufficient technical and organisational measures to ensure information security** (enforcement) — https://overview.legal/posts/83465
- **Midlands Regional Hospital Tullamore, County Offaly: Insufficient technical and organisational measures to ensure information security** §165 (enforcement, Data Protection Authority of Ireland) — https://overview.legal/posts/83465
- **hier** (guidance) — https://overview.legal/posts/50413

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-34#par-3-pnt-a · 2026-10-06