Massive Facebook breach underscores limits to current data breach notification laws