The amendment to the Safeguards Rule will go into effect in April, requiring non-banking financial institutions to report security incidents involving the information of at least 500 customers to the FTC.
FTC approves rule giving non-banking financial institutions 30 days to report data breaches
