Data privacy 101: How does one manage data breaches and security incidents?