Norwegian healthcare officials failed to notify individuals affected by a personal data breach in a timely way, a violation of the General Data Protection Regulation (GDPR), which takes effect in May. Authorities allegedly waited a week before alerting people — roughly half the population of Norway — whose healthcare data may have been stolen by hackers.