SEC to Require Financial Firms to Have Data Breach Incident Plans

The SEC now requires certain financial institutions to have written policies for detecting, addressing, and notifying customers of data breaches involving their personal information.