(1) the nature of the breach and the categories and approximate numbers of data subjects and personal data records concerned (2) the name and contact details of the data protection officer or other contact in your firm where more information can be obtained (3) the foreseeable consequences of the breach (4) the measures you have taken or propose to take to address the breach or measures to mitigate its effects