2018 saw the introduction of the General Data Protection Regulation, but it hasn't yet had a material effect on the scale of data breaches.