Implications of GDPR Breach Notification Requirements Are Under Appreciated