In the Dark? A Global Guide to Data-Breach Notifications and Self-Protection