DATA BREACHES AND THEIR NOTIFICATION