Supervisory Authorities See Many Breaches But Issue Few Penalties

Since data breaches must generally be reported, there’s been an explosive rise in the number of notices issued to regulators. But does it matter?