(9)Personal data breaches should be managed by the joint controller responsible. In the unlikely event that the joint controller responsible cannot be determined rapidly, all the joint controllers should be responsible for managing the personal data breach. In such a case, it is appropriate that all the joint controllers coordinate with each other with a view to meeting their respective notification obligations towards the supervisory authority and their communication obligations towards the data subject under Regulation (EU) 2018/1725 or Regulation (EU) 2016/679. Where a personal data breach is communicated to the data subject, it is necessary that this is done in an effective manner in order to avoid multiple or inconsistent communications. The ECB should always notify all personal data breaches to the European Data Protection Supervisor, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.