The EU AI Act just gave you a breach notification clock you didn’t know about

Most security teams already have a breach clock memorized. SEC rules give public companies four business days after determining an incident is material. Those numbers get built into incident response runbooks, tabletop exercises and escalation paths, because the clock starts the moment the team confirms something happened.