Action catalogue · databreach.notify.authority
May an AI agent «Notify authority of data breach»?
Catalogue as of: · Jurisdictions: Germany, Austria, Italy
Short answer
Prepare only. An agent may prepare «Notify authority of data breach» — a human must carry it out: the action requires human approval or a professional reservation. Mandact recognises this and puts the transaction before a human instead of executing it.
Form requirement by country
| Country | Form requirement | Consequence for the agent |
|---|---|---|
| Switzerland | not in the catalogue | not defined for this jurisdiction |
| Germany | no form required | no statutory form — the mandate sets the limits |
| Austria | no form required | no statutory form — the mandate sets the limits |
| Italy | no form required | no statutory form — the mandate sets the limits |
Properties in the catalogue
- Agent capability
- prepare only (prepare_only)
- Reversible
- no — final
- Risk level
- 3 of 3
- Human approval recommended
- yes — add to escalateActions
- Statutory deadline
- 72 hours — Mandact shows it but does not enforce it
Legal basis
Art. 33 Abs. 1 DSGVO (72 h ab Kenntnis)
Frequently asked questions
May an AI agent «Notify authority of data breach» in Germany?
Only as preparation. In Germany the rule is: no form required. Execution stays with a human.
May an AI agent «Notify authority of data breach» in Austria?
Only as preparation. In Austria the rule is: no form required. Execution stays with a human.
May an AI agent «Notify authority of data breach» in Italy?
Only as preparation. In Italy the rule is: no form required. Execution stays with a human.
Not legal advice. The information comes from the action catalogue from which the Mandact engine derives its decisions; in an individual case the applicable law decides.