Compliance & Regulatory Tools

Breach Notification Timeline Calculator

Select applicable regulation and discovery date to compute notification deadlines for regulators, individuals, and card networks.

No data is transmitted — everything runs locally

Breach Notification Timeline Calculator

The Breach Notification Timeline Calculator computes deadlines for regulatory, individual, and media notification across GDPR, HIPAA, PCI, SEC, and state breach notification laws.

• Calculate GDPR 72-hour notification deadline from a breach discovery date

• Find HIPAA individual notification deadline from a discovery date

• Look up applicable state breach notification window before an incident response

• Check SEC cybersecurity rule 4-day deadline for a public company incident

Credential and secrets management for teams. 1Password provides enterprise password management and secrets infrastructure for development teams.
View breach evidence with 1Password
External site · Independent provider · We may receive a commission · Not a recommendation
What does this tool tell you?
The Breach Notification Timeline Calculator computes deadlines for regulatory, individual, and media notification across GDPR, HIPAA, PCI, SEC, and state breach notification laws.
What affects the result most?
GDPR: 72 hours to notify supervisory authority from becoming aware — Art 33. HIPAA: 60 days from discovery to notify individuals; 60 days for HHS; media if 500+ in state. PCI DSS: immediately notify card brands and acquirer when compromise suspected.
How should I use the result?
The calculation is deterministic — the same inputs always produce the same output — so the most useful workflow is to vary one input at a time and see which factor moves the result most. That tells you where to focus your attention before committing to a decision.
When a breach happens, the clock starts immediately. The Data Governance Pack generates breach response documentation — notification timelines, regulatory requirements, and evidence checklists.
View breach response preparation →
External site · Independent provider · We may receive a commission · Not a recommendation