Without commenting on specific cases, which we can't do, I can say this is a measure that's intended to promote compliance. It's intended to promote compliance before a breach.
I would suggest that in cases where there were breaches, perhaps that wouldn't have happened if these compliance measures had been in force. Again, they are intended to promote compliance from the outset and to prevent breaches.