Liberty data breach – setting a precedent for GDPR?