Please read the attached article on recent Bangkok Airways cyber attack and atte

Please read the attached article on recent Bangkok Airways cyber attack and attempt to answer the questions below.
What responsibilities do the private-sector companies have towards customer’s privacy and data?
You are the Chief Information Security Officer (CISO) for Bangkok Airways. Describe and ellaborate your (incident) response when you find out about the breach.
What authorities (federal, local, worldwide etc.) should have authorization to investigate this incident? Should the authorities be allowed to simply take full control of the investigation? or should be done in parallel with Bangkok Airways? What type of data the investigating authorities should have access as part of this investigation?
Article link: https://www.cshub.com/attacks/articles/iotw-ransomware-thieves-publish-major-airlines-passenger-information