Pharma data breaches should stop once data protection law comes into force