When the entity becomes aware of the significant incident, not when the incident began. Article 23(4) counts both the early warning (24 hours) and the incident notification (72 hours) from that moment.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
We use strictly necessary storage to run this site. With your permission, we also use PostHog, hosted in the EU, to count visits and page views so we can improve the site. Nothing is measured until you allow it, and you can change your choice at any time. Details in our cookie policy.