It a company receives an anonymous email demanding ransom for the stolen personal data of its clients, what must the company do next, per GDPR requirements’3

It a company receives an anonymous email demanding ransom for the stolen personal data of its clients, what must the company do next, per GDPR requirements’3
A . Notify the police and Tile a criminal complaint about the incident
B . Start an investigation to understand the incident’s possible scope, duration and nature
C . Send a notification to the competent supervisory authority describing the incident.
D . Send an email about the incident to all clients and ask them to change their passwords

View Answer

Answer: C