2. A description of the security breach, which should include: a. the categories and number of data subjects concerned 3. The measures taken or proposed to be taken to mitigate or address the possible ...