The Article 29 Working Party has repeated its demand for a data breach notification law.