“ Nonetheless, it additionally tightens laws around enforcement and penalties for not adhering to the data administration and breach notification requirements. ”