# We cannot complete the GDPR notification within 72 hours. Can we notify in phases or late?

Yes, in phases, and late only with reasons. Article 33(4) of the GDPR allows the information to be provided in phases, without undue further delay, where it is not possible to provide it all at the same time, and Article 33(1) requires a notification made after 72 hours to be accompanied by the reasons for the delay. So do not wait for the full picture: send an initial notification within the deadline with what you know, the nature of the breach, likely consequences and measures taken so far, and the contact of your data protection officer, then update as facts arrive. Keep a record of when you became aware and why any part came later. Supervisory authorities usually provide online forms that support follow-ups. NetSenX prepares an Article 33 notification for your DPO from the incident data; submitting it stays with you.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Incident reporting deadlines](https://netsenx.com/en/faq/reporting) · https://netsenx.com/en/faq/we-cannot-meet-72-hours-can-we-notify-in-phases

## Read next

- https://netsenx.com/en/nis2-incident-reporting-deadlines
- https://netsenx.com/en/nis2-network-monitoring

## Related questions

- [When does the GDPR 72-hour notification clock start?](https://netsenx.com/en/faq/when-does-the-gdpr-72-hour-clock-start)
- [One incident, several reports: how do NIS2, the GDPR and DORA fit together?](https://netsenx.com/en/faq/one-incident-several-reports-nis2-gdpr-dora)
- [What is a major ICT-related incident under DORA?](https://netsenx.com/en/faq/what-is-a-major-ict-incident-under-dora)
- [What are the DORA incident reporting deadlines?](https://netsenx.com/en/faq/what-are-the-dora-incident-reporting-deadlines)
- [Where are Cyber Resilience Act vulnerability reports submitted?](https://netsenx.com/en/faq/where-are-cra-vulnerability-reports-submitted)