We all now know there is a maximum time for reporting breaches of 72 hours.  However, it seems many have not decided what to do as a first step when there is a suspected breach.  Those who have had our advice on GDPR will have a procedure.  Nevertheless, the simple answer is to call us – we will answer whatever the time or day.  To quote a client, “I wish I had called you first – I will next time”.