response to mass privacy breaches