The types of material and non-material damage that could result if a breach of data is not addressed in an appropriate and timely manner.