This is direct from the ICO Commissioner. Importance of this post can not be overstated. Please read carefully.
https://iconewsblog.org.uk/2017/09/05/gdpr-setting-the-record-straight-on-data-breach-reporting/amp/
A bit more of GDPR myth busting by ICO direct
