Companies that are not established in the EU could face more uncertainty when reporting a data breach involving EU data subjects and complying with the General Data Protection Regulation (GDPR), due to a proposed change to remove the “one-stop shop” reporting mechanism.
https://www.pinsentmasons.com/out-law/news/uk-non-eu-businesses-face-uncertainty-gdpr-data-breach