Managing Data Breaches: Practical Steps to Stay Compliant