All notices relating to personal data breaches issued to identifiable living individuals must be made in plain language (readily understandable etc.).