Future regulatory requirements for AI data breaches