Keeping the Violation Register is a mandatory requirement under the GDPR
Article 33 of EU Regulation 679/2016. Where can the actions to be taken in the event that it is necessary to proceed with a "Notification of a personal data breach to the supervisory authority".