What you need to know about mandatory data breach reporting