Agents urged to heed GDPR guidance after breaches uncovered