Data protection authority in EU (e.g., ICO, CNIL); breach notification and complaints.
Notify supervisory authority of breach within 72 hours.
GDPR