Data subject claims – made by individuals whose data has been compromised following a corporate insured experiencing a data breach – is “effectively becoming the new PPI”, often acting as a “sting in the tail” for organisations attempting to recover after a cyber attack.