Handling personal data breaches (primary care)