When to activate: breach notification, data breach, incident response, GDPR 72 hours, CCPA notification, HIPAA breach, regulator reporting, affected party notification, data incident