> There are several precedents that show that circumventing technical measures is not required for data breach to have occurred.

Given that you know significantly more than me perhaps you could give me some examples. I'm always interested to see countries in which such jurisprudence is different from the norm, especially in Europe. Thanks :)