Breach Response in context of new Privacy Regulation