How to Cope with GDPR Strict Breach Reporting Rules