Nearly 60% of firms have experienced a GDPR-related data breach in the past five years