Compliance officer documenting data breach in office