The new EU General Data Protection Regulation (GDPR) will require that companies that process personal data inform the relevant data protection authority in case of a data breach.
A European Commission official confirmed that data breaches that happened before 25 May, when GDPR comes into force, but are kept silent until after that, will also be liable for such a fine.