same here, but then again, if you don't disclose it and cover it up properly, who's to say you've been hacked? it's a bit of a chicken and egg problem. unless s

same here, but then again, if you don't disclose it and cover it up properly, who's to say you've been hacked? it's a bit of a chicken and egg problem. unless some external party can prove you are hacked, which is not always the case, it's hard to apply this law to anyone. To properly apply it, countries would have to scrape and invesitgate all sites in their locality, which is a problem, as automated processes for this can lead to false positives, and that could be very damaging for a company, as the fines are very high and would be devastating for a company who is wrongly accused by some automated process. (which is why they are careful with implementing such a measure i think, or i hope)