Action catalogue · databreach.notify.subject
May an AI agent «Notify data subjects of breach»?
Catalogue as of: · Jurisdictions: Germany, Austria, Italy
Short answer
Prepare only. An agent may prepare «Notify data subjects of breach» — a human must carry it out: the action requires human approval or a professional reservation. Mandact recognises this and puts the transaction before a human instead of executing it.
Form requirement by country
| Country | Form requirement | Consequence for the agent |
|---|---|---|
| Switzerland | not in the catalogue | not defined for this jurisdiction |
| Germany | no form required | no statutory form — the mandate sets the limits |
| Austria | no form required | no statutory form — the mandate sets the limits |
| Italy | no form required | no statutory form — the mandate sets the limits |
Properties in the catalogue
- Agent capability
- prepare only (prepare_only)
- Reversible
- no — final
- Risk level
- 3 of 3
- Human approval recommended
- yes — add to escalateActions
Legal basis
Art. 34 DSGVO (unverzueglich bei hohem Risiko)
Frequently asked questions
May an AI agent «Notify data subjects of breach» in Germany?
Only as preparation. In Germany the rule is: no form required. Execution stays with a human.
May an AI agent «Notify data subjects of breach» in Austria?
Only as preparation. In Austria the rule is: no form required. Execution stays with a human.
May an AI agent «Notify data subjects of breach» in Italy?
Only as preparation. In Italy the rule is: no form required. Execution stays with a human.
Not legal advice. The information comes from the action catalogue from which the Mandact engine derives its decisions; in an individual case the applicable law decides.