If a data breach occurs, under which circumstances should you notify the individuals concerned directly?

a) In all circumstances.
b) Where there is a risk to the individuals' rights and freedoms.
c) Where there is a high risk to the individuals' rights and freedoms.
d) Never - you need only notify the relevant supervisory authority.

Answer = c