GDPR Breach Clock
The Article 33 72-hour clock starts the moment you log the incident
The video below shows GDPR Breach Clock running on a real Odoo 19 database. Want it driven against your own data, or a question answered first? Ask and we will set up a session.
GDPR Article 33 gives you 72 hours from becoming aware of a personal data breach to notify your supervisory authority - not 72 hours from when the breach happened. Missing that window, or not being able to prove you tracked it, is one of the most common triggers for an SME GDPR fine. Odoo has no native tool for this at all; Odoo's own official guidance tells you to write your own incident-response process. This app gives you one: log an incident and the clock starts automatically, an activity reminder fires once the deadline gets close so it can't be quietly missed, and a one-click report gives you the Article 33(3) notification document ready to send to your authority.
What it does
The clock starts on "aware," not "happened"
The single most common mistake in breach response is starting the countdown from when the incident occurred instead of when someone actually found out. This app gets that distinction right by design.
A reminder that can't be missed
Once the 72-hour deadline is within 24 hours (or already passed), the responsible person gets an activity reminder automatically - no need to remember to check back.
Article 33(3) notification, one click
The printable report covers exactly what your authority needs: the nature of the breach, categories and number of people affected, your contact point, likely consequences, and the measures you've taken.
Kept confidential by design
Breach records are sensitive by nature - a dedicated "Data Protection Officer" access group keeps them visible only to whoever you assign, not every internal user.
Screenshots
Requirements
- Odoo 19.0, Community or Enterprise.
- Odoo.sh or On-Premise only. Third-party apps cannot be installed on Odoo Online (SaaS) databases — check your hosting before buying.
- Module
mh_gdpr_breach_clock, version 19.0.1.0.9, licensed OPL-1.
Related apps
Per-field anonymization, a legal hold override, and an append-only purge log - not a Data Recycle clone
Real WCAG violations, found in your rendered pages - not another overlay widget
An editable rule engine, not a hardcoded legal database - because even the professionals disagree