Given the volume of data and frequency of breaches, notifying each incident to the affected individual and the Board promptly is challenging. Over a year