Per the LGPD, communication to the national authority and the data subject regarding the occurrence of a security incident that may create risk or relevant damage shall be done:
a) Immediately and without delay
b) Within 24 hours
c) Within 72 hours
d) Within 7 days