Statistics of Don't tell them now (or at all) - End user notification duties under NIS Directive and GDPR