However, the data processor or controller do not have to notify the data subjects if anonymized data is breached.
A person shall be able to transfer their personal data from one electronic processing system to and into another, without being prevented from doing so by the data controller.