Tour Booking Compliance Guide Creation

I'm seeking a detailed guide on customer data protection specifically for tour booking. The focus should be on data breach response procedures.

The guide should cover:
- Steps to take following a data breach
- Notification requirements for affected customers
- Legal obligations and timelines
- Mitigation strategies to minimize impact
- Documentation and reporting templates

Ideal skills and experience:
- Expertise in data protection regulations
- Experience in creating compliance documents
- Knowledge of the tour booking industry
- Strong writing and organizational skills