They also need to inform users about the description of the data breach, including its nature, extent and the timing and ...