Are companies legally required to report all data breaches?

A.
No, different jurisdictions have different rules.

B.
No, not if the data is encrypted.

C.
No, companies’ codes of ethics don’t require it.

D.
No, only if the breach had a material impact.