Are heightened awareness and high pro le breaches bringing regulatory change?