2016 accounted for a real turning point in privacy legislation. In 2016, the mandatory requirement to report data breaches came into force, the General Data