{
  "url": "https://openlegislation.uk/eu-decision-2019-236/article-5",
  "json_url": "https://openlegislation.uk/eu-decision-2019-236/article-5.json",
  "legislation": "eudn/2019/236",
  "legislation_title": "Commission Decision (EU) 2019/236 of 7 February 2019 laying down internal rules concerning the provision of information to data subjects and the restriction of certain of their rights in the context of the processing of personal data by the European Commission for the purposes of internal security of the Union institutions",
  "legislation_url": "https://openlegislation.uk/eu-decision-2019-236",
  "path": "article/5",
  "kind": "article",
  "number": "5",
  "heading": "Communication of a personal data breach to data subjects",
  "text": "Where the Commission restricts the communication of a personal data breach to the data subject, as referred to in Article 35 of Regulation (EU) 2018/1725, it shall record and register the reasons for the restriction in accordance with Article 6 of this Decision.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2019/236/article/5",
    "retrieved_at": "2026-11-01T15:12:50.141365+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}