85. Notification of personal data breach by processor

Where a processor becomes aware of a personal data breach, the processor shall notify the controller on whose behalf the data are being processed of the breach -

(a) in writing, and

(b) without undue delay.