Breaches of Data Protection and Vicarious Liability