Much less than 250 employees but its info-processing impacts the rights and freedoms of data subjects, isn't occasional, or involves specified varieties of delicate personalized details. A tough prerequisite is that organizations ought to report data breaches to supervisory authorities and folks influenced by a breach within just seventy two https://newsideas.in/nathan-labs-advisory-shaping-robust-cyber-security-policies-in-the-usa/