Organisations should prepare for an increase in claims raised by data subjects following cybersecurity incidents.