In the event of a data breach, pediatric clinics are required to notify the relevant authorities within 72 hours. Additionally, if the breach is likely to result in a high risk to the rights and freedoms of the affected children, their parents or guardians must also be informed.