Organizations must inform users about privacy breaches

>