FrоntDооrKey, а mortgаge lender, collects privаte financial data on its customers as part of its routine business practices. In 2022, the email account of Jozef Horvath, an employee of the company, was accessed by an unauthorized person. That unauthorized person potentially gained access to a significant amount of sensitive personal data related to mortgage loan applications. When Jozef reported this incident to his supervisor, Jozef explained that he did not know whether the personal data was encrypted at the time of the incident. No investigation was conducted by FrontDoorKey in 2022. In 2023, mortgage regulators learned of the incident and initiated an investigation. As the new privacy officer of FrontDoorKey, the CEO has asked you what steps FrontDoorKey should have taken in 2022 in response to the email incident. What do you advise the CEO?